CVE-2002-2261

Description

Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname.

How to fix CVE-2002-2261

To remediate CVE-2002-2261, upgrade the affected package to a fixed version below.

• Debian/sendmail—upgrade to 8.12.7 or later

Is CVE-2002-2261 being exploited?

Low — EPSS is 0.6%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 8.12.7

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2002-2261