Sendmail: Race condition in the handling of asynchronous signals

2006-03-22T00:00:00
ID GLSA-200603-21
Type gentoo
Reporter Gentoo Foundation
Modified 2006-03-22T00:00:00

Description

Background

Sendmail is a popular mail transfer agent (MTA).

Description

ISS discovered that Sendmail is vulnerable to a race condition in the handling of asynchronous signals.

Impact

An attacker could exploit this via certain crafted timing conditions.

Workaround

There is no known workaround at this time.

Resolution

All Sendmail users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=mail-mta/sendmail-8.13.6"