Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Frank Sheiness

#49073of 53,635
5Total CVSS
Vulnerabilities · 1
PT-2006-2195
5.0
2006-06-07
Sendmail · Sendmail · CVE-2006-1173
**Name of the Vulnerable Software and Affected Versions** Sendmail versions prior to 8.13.7 **Description** The issue allows remote attackers to cause a denial of service by sending deeply nested, malformed multipart MIME messages. This leads to the exhaustion of the stack during the recursive `mime8to7` function for performing 8-bit to 7-bit conversion. As a result, Sendmail is prevented from delivering queued messages, and there is a potential for disk consumption by core dump files. **Recommendations** For Sendmail versions prior to 8.13.7, update to version 8.13.7 or later to resolve the issue.