PT-2005-3012 · Sendmail+1 · Sendmail+1

Damian Menscher · Publicado 2005-06-29 · Atualizado 2008-09-05 · CVE-2005-2070

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: ClamAV Mail fILTER (clamav-milter) versions 0.84 through 0.85d

Description: The issue allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading, specifically when used in Sendmail using long timeouts.

Recommendations: For versions 0.84 through 0.85d, consider restricting the use of long timeouts in Sendmail or implement measures to limit the duration of open connections to mitigate the risk of denial of service.

Correção

Identificadores relacionados

CVE-2005-2070

DSA-737-1

DTSA-3-1

Produtos afetados

Clamav

Sendmail

Referências · 8

• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2070 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2005_38_clamav.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2005-2070 · Aviso do Fabricante
• http://securityfocus.com/bid/14047 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2070 · Nota de Segurança
• http://debian.org/security/2005/dsa-737 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-2070 · Aviso do Fabricante
• http://seclists.org/lists/bugtraq/2005/Jun/0197.html · Aviso do Fabricante