Lucene search

K
cve[email protected]CVE-2006-7176
HistoryMar 27, 2007 - 11:19 p.m.

CVE-2006-7176

2007-03-2723:19:00
NVD-CWE-Other
web.nvd.nist.gov
19
sendmail
red hat enterprise linux
cve-2006-7176
spoofing
security vulnerability

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.011 Low

EPSS

Percentile

84.2%

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the “localhost.localdomain” domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.

CPENameOperatorVersion
sendmail:sendmailsendmaileq8.13.1.2

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.011 Low

EPSS

Percentile

84.2%