PT-2006-1146 · Sendmail+2 · Sendmail+2

Mark Dowd · Publicado 2006-03-22 · Atualizado 2018-10-19 · CVE-2006-0058

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Sendmail versions 8.13.x through 8.13.5

Description: A signal handler race condition allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.

Recommendations: For Sendmail versions 8.13.x through 8.13.5, update to version 8.13.6 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2006-0058

DSA-1015-1

HPSBUX02108

RHSA-2006:0264

RHSA-2006_0264

Produtos afetados

Hp-Ux

Red Hat

Sendmail

Referências · 83

• 🔥 https://exploit-db.com/exploits/2051 · Exploit
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2006-0265.html · Aviso do Fabricante
• http://ciac.org/ciac/bulletins/q-151.shtml · Nota
• http://f-secure.com/security/fsc-2006-2.shtml · Nota
• http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688 · Nota
• http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635 · Aviso do Fabricante
• http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253Demr_na-c00629555%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.619600 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/1049 · Nota
• http://securityfocus.com/bid/17192 · Nota
• http://secunia.com/advisories/19346 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102262-1 · Aviso do Fabricante
• http://secunia.com/advisories/20723 · Nota
• https://access.redhat.com/security/cve/CVE-2006-0058 · Nota