Sendmail long mail header DoS

Verry long message header causes access to free'ed memory...

CVE-2006-4434

CVE-2006-4434 affects Sendmail before 8.13.8, with a use-after-free in header processing that can crash the daemon and cause a denial of service. Context from the initial entry notes the vendor’s dispute on severity, but multiple vulnerability advisories and patch plugins confirm the issue and re...

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...

[SECURITY] [DSA 1155-2] New sendmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1155-2 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1155-1] New sendmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1155-1 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2006 http://www.debian.org/security/faq -...

DSA-1155 sendmail - programming error

Bulletin has no description...

HP-UX PHNE_34936 : HP-UX Sendmail MIME Remote Denial of Service (DoS) (HPSBUX02124 SSRT061159 rev.2)

s700800 11.11 sendmail1M 8.9.3 patch : A potential security vulnerability has been identified with HP-UX running Sendmail processing malformed multipart MIME messages. This vulnerability could potentially allow a remote unauthenticated user to cause a Denial of Service DoS. %NASLMINLEVEL 70300 C...

HP-UX PHNE_34927 : s700_800 11.04 (VVOS) sendmail(1m) 8.9.3 patch

s700800 11.04 VVOS sendmail1m 8.9.3 patch : The remote HP-UX host is affected by multiple vulnerabilities : - A vulnerability has been identified in sendmail which may allow a remote attacker to execute arbitrary code. References: CVE-2006-0058, US-CERT VU834865. HPSBUX02108 SSRT061133 - A...

HP-UX PHNE_34689 : HP-UX Sendmail MIME Remote Denial of Service (DoS) (HPSBUX02124 SSRT061159 rev.2)

s700800 11.23 sendmail1m 8.11.1 patch : A potential security vulnerability has been identified with HP-UX running Sendmail processing malformed multipart MIME messages. This vulnerability could potentially allow a remote unauthenticated user to cause a Denial of Service DoS. %NASLMINLEVEL 70300 C...

HP-UX PHNE_34900 : HP-UX Sendmail MIME Remote Denial of Service (DoS) (HPSBUX02124 SSRT061159 rev.2)

s700800 11.00 sendmail1m 8.9.3 patch : A potential security vulnerability has been identified with HP-UX running Sendmail processing malformed multipart MIME messages. This vulnerability could potentially allow a remote unauthenticated user to cause a Denial of Service DoS. %NASLMINLEVEL 70300 C...

HP-UX Security Patch : PHNE_31917

sendmail1m 8.9.3 patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid22109; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

Sendmail 8.13.5 - Remote Signal Handling (PoC)

Sendmail 8.13.5 - Remote Signal Handling PoC !/usr/bin/env python [email protected] Sendmail 8.13.5 and below Remote Signal Handling exploit usage: rbl4ck-sendmail.py 127.0.0.1 0 25 this exploit was leaked to the PHC Phrack High Council so instead of only letting them have a copy, we figu...

Sendmail <= 8.13.5 Remote Signal Handling Exploit PoC

Exploit for linux platform in category dos / poc ===================================================== Sendmail 1: IP = sys.argv1 ifargc 2: defarch = intsys.argv2 ifargc 3: PORT = intsys.argv3 def ia32o: s='' w=chri % 256 o = o 8 x=chri % 256 o = o 8 y=chri % 256 o =...

Sendmail 8.13.5 - Remote Signal Handling (PoC)

!/usr/bin/env python [email protected] Sendmail 8.13.5 and below Remote Signal Handling exploit usage: rbl4ck-sendmail.py 127.0.0.1 0 25 this exploit was leaked to the PHC Phrack High Council so instead of only letting them have a copy, we figure everyone should have what they have. :-...

CentOS 3 / 4 : sendmail (CESA-2006:0264)

Updated sendmail packages to fix a security issue are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Sendmail is a Mail Transport Agent MTA used to send mail between machines. A flaw in the...

CentOS 3 / 4 : sendmail (CESA-2006:0515)

Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Red Hat Enterprise Linux 3 have been updated to the...

sendmail security update

CentOS Errata and Security Advisory CESA-2006:0515-01 Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Re...

Mandrake Linux Security Advisory : sendmail (MDKSA-2006:104)

A vulnerability in the way Sendmail handles multi-part MIME messages was discovered that could allow a remote attacker to create a carefully crafted message that could crash the sendmail process during delivery. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C...

Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : sendmail (SSA:2006-166-01)

New sendmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a possible denial-of-service issue. Sendmail's complete advisory may be found here: http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc Sendmail has also provided an FAQ about this...

RHEL 2.1 / 3 / 4 : sendmail (RHSA-2006:0515)

Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Red Hat Enterprise Linux 3 have been updated to the...