PT-2007-1454 · Sendmail+1 · Sendmail+1

Nathan.J.Olson · Published 2007-03-27 · Updated 2017-10-11 · CVE-2006-7176

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sendmail versions 8.13.1-2 and earlier on Red Hat Enterprise Linux 4 Update 4 and earlier

Description The issue allows remote attackers to potentially spoof messages by not rejecting the "localhost.localdomain" domain name for e-mail messages coming from external hosts.

Recommendations For Sendmail version 8.13.1-2 and earlier on Red Hat Enterprise Linux 4 Update 4 and earlier, consider updating to a newer version that rejects the "localhost.localdomain" domain name for e-mail messages from external hosts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-7176

RHSA-2007:0252

RHSA-2007_0252

RHSA-2010:0237

RHSA-2010_0237

Affected Products

Red Hat

Sendmail

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2006-7176 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0252.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03060 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11499 · Note
• https://access.redhat.com/errata/RHSA-2010:0237 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2007-248.htm · Note
• http://secunia.com/advisories/25743 · Note
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=171838 · Note
• https://access.redhat.com/security/cve/CVE-2009-4565 · Note
• https://access.redhat.com/errata/RHSA-2007:0252 · Note
• http://securityfocus.com/bid/23742 · Note
• https://access.redhat.com/security/cve/CVE-2006-7176 · Note
• http://secunia.com/advisories/25098 · Note