Sendmail < 8.14.4 SSL Certificate NULL Character Spoofing

2010-01-0700:00:00

Tenable

www.tenable.com

JSON

The remote mail server is running a version of Sendmail earlier than 8.14.4. Such versions are potentially affected by a flaw that my allow an attacker to spoof SSL certificates by using a NULL character in certain certificate fields.

Binary data 5293.prm

VendorProductVersionCPE
sendmailsendmailcpe:/a:sendmail:sendmail

Vendor	Product	Version	CPE
sendmail	sendmail		cpe:/a:sendmail:sendmail

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4565

www.sendmail.org/releases/8.14.4

JSON