PT-2006-2195 · Sendmail+2 · Sendmail+2

Frank Sheiness · Published 2006-06-07 · Updated 2018-10-18 · CVE-2006-1173

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sendmail versions prior to 8.13.7

Description The issue allows remote attackers to cause a denial of service by sending deeply nested, malformed multipart MIME messages. This leads to the exhaustion of the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion. As a result, Sendmail is prevented from delivering queued messages, and there is a potential for disk consumption by core dump files.

Recommendations For Sendmail versions prior to 8.13.7, update to version 8.13.7 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2006-1173

DSA-1155

HPSBUX02124

RHSA-2006:0515

RHSA-2006_0515

Affected Products

Hp-Ux

Red Hat

Sendmail

References · 64

• http://mandriva.com/security/advisories?name=MDKSA-2006:104 · Vendor Advisory
• http://secunia.com/advisories/21327 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc · Vendor Advisory
• http://secunia.com/advisories/20651 · Vendor Advisory
• http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635 · Vendor Advisory
• http://debian.org/security/2006/dsa-1155 · Vendor Advisory
• http://securityfocus.com/bid/18433 · Patch
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY85415&apar=only · Vendor Advisory
• http://vupen.com/english/advisories/2006/2389 · Vendor Advisory
• http://secunia.com/advisories/20726 · Vendor Advisory
• http://secunia.com/advisories/20782 · Vendor Advisory
• http://secunia.com/advisories/20654 · Vendor Advisory
• http://www-1.ibm.com/support/search.wss?rs=0&q=IY85930&apar=only · Vendor Advisory
• http://secunia.com/advisories/21647 · Vendor Advisory
• http://secunia.com/advisories/21160 · Vendor Advisory