Lucene search

K
freebsdFreeBSDC611BE81-FBC2-11DA-9156-000E0C2E438A
HistoryJun 14, 2006 - 12:00 a.m.

sendmail -- Incorrect multipart message handling

2006-06-1400:00:00
vuxml.freebsd.org
9

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.349 Low

EPSS

Percentile

97.1%

Problem Description
A suitably malformed multipart MIME message can cause
sendmail to exceed predefined limits on its stack usage.
Impact
An attacker able to send mail to, or via, a server can cause
queued messages on the system to not be delivered, by causing
the sendmail process which handles queued messages to crash.
Note that this will not stop new messages from entering the
queue (either from local processes, or incoming via SMTP).
Workaround
No workaround is available, but systems which do not receive
email from untrusted sources are not vulnerable.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 4.11UNKNOWN
FreeBSDanynoarchfreebsd< 4.11_19UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.349 Low

EPSS

Percentile

97.1%