CVE-2002-1278

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file (sendmail.cf) in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Spam email.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Nov 12, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-12797.2Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via cert CVE-2002-12805.0Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and crash).CVE-2002-12817.5Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local an CVE-2002-12827.5Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute ar CVE-2002-12835.0Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request w CVE-2002-12844.6The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be CVE-2002-12857.2runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.CVE-2002-12867.5The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different CVE-2002-12875.0Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of CVE-2002-12885.0The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet CVE-2002-12897.5The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial o CVE-2002-12906.4The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard vi