[SECURITY] [DSA 1015-1] New sendmail packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1015-1 [email protected] http://www.debian.org/security/ Martin Schulze March 23rd, 2006 http://www.debian.org/security/faq -...

SUSE-SA:2006:017: sendmail

The remote host is missing the patch for the advisory SUSE-SA:2006:017 sendmail. The popular MTA sendmail is vulnerable to a race condition when handling signals. Under certain circumstances this bug can be exploited by an attacker to execute commands remotely. Sendmail was the default MTA in SuS...

US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-081A Sendmail Race Condition Vulnerability Original release date: March 22, 2006 Last revised: -- Source: US-CERT Systems Affected Sendmail versions prior to 8.13.6. Overview A race...

GLSA-200603-21 : Sendmail: Race condition in the handling of asynchronous signals

The remote host is affected by the vulnerability described in GLSA-200603-21 Sendmail: Race condition in the handling of asynchronous signals ISS discovered that Sendmail is vulnerable to a race condition in the handling of asynchronous signals. Impact : An attacker could exploit this via certain...

Mandrake Linux Security Advisory : sendmail (MDKSA-2006:058)

A race condition was reported in sendmail in how it handles asynchronous signals. This could allow a remote attacker to be able to execute arbitrary code with the privileges of the user running sendmail. The updated packages have been patched to correct this problem via a patch provided by the...

RHEL 2.1 : sendmail (RHSA-2006:0265)

Updated sendmail packages to fix a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. Sendmail is a Mail Transport Agent MTA used to send mail between machines. A flaw in the...

DSA-1015-1 sendmail - programming error

Bulletin has no description...

RHEL 3 / 4 : sendmail (RHSA-2006:0264)

Updated sendmail packages to fix a security issue are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Sendmail is a Mail Transport Agent MTA used to send mail between machines. A flaw in the...

Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : sendmail (SSA:2006-081-01)

New sendmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. Sendmail's advisory concerning this issue may be found here: http://www.sendmail.com/company/advisory/index.shtml %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

sendmail security update

CentOS Errata and Security Advisory CESA-2006:0265-01 Updated sendmail packages to fix a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. Sendmail is a Mail Transport Agent MTA...

[slackware-security] sendmail

New sendmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. Sendmail's advisory concerning this issue may be found here: http://www.sendmail.com/company/advisory/index.shtml This issue will appear in the Common Vulnerabilities and...

CVE-2006-0058

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...

Race condition

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...

CVE-2006-0058

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...

CVE-2006-0058

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...

DEBIAN-CVE-2006-0058

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...

CVE-2006-0058

CVE-2006-0058 is a race-condition vulnerability in Sendmail 8.13.x (before 8.13.6) that can be triggered remotely to execute arbitrary code. The issue arises from improper handling of timeouts during message processing, where setjmp/longjmp usage may be interrupted, enabling memory corruption in ...

CVE-2006-0058

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...

CVE-2006-0058

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...

sendmail security update

CentOS Errata and Security Advisory CESA-2006:0264 Updated sendmail packages to fix a security issue are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Sendmail is a Mail Transport Agent MTA...