PT-2006-2195 · Sendmail+2 · Sendmail+2
Frank Sheiness
·
Publicado
2006-06-07
·
Atualizado
2018-10-18
·
CVE-2006-1173
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Sendmail versions prior to 8.13.7
Description
The issue allows remote attackers to cause a denial of service by sending deeply nested, malformed multipart MIME messages. This leads to the exhaustion of the stack during the recursive
mime8to7 function for performing 8-bit to 7-bit conversion. As a result, Sendmail is prevented from delivering queued messages, and there is a potential for disk consumption by core dump files.Recommendations
For Sendmail versions prior to 8.13.7, update to version 8.13.7 or later to resolve the issue.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Hp-Ux
Red Hat
Sendmail