PT-2006-1146 · Sendmail+2 · Sendmail+2

Mark Dowd · Published 2006-03-22 · Updated 2018-10-19 · CVE-2006-0058

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Sendmail versions 8.13.x through 8.13.5

Description: A signal handler race condition allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.

Recommendations: For Sendmail versions 8.13.x through 8.13.5, update to version 8.13.6 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2006-0058

DSA-1015-1

HPSBUX02108

RHSA-2006:0264

RHSA-2006_0264

Affected Products

Hp-Ux

Red Hat

Sendmail

References · 83

• 🔥 https://exploit-db.com/exploits/2051 · Exploit
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0265.html · Vendor Advisory
• http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.619600 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102262-1 · Vendor Advisory
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.asc · Vendor Advisory
• http://debian.org/security/2006/dsa-1015 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-0058 · Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY82992&apar=only · Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY82993&apar=only · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-0058 · Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY82994&apar=only · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0264.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_17_sendmail.html · Vendor Advisory