3APA3A : Using FTP protocol weaknesses

How to exploit bugs in the implementation of the FTP protocol David Sacerdot, in his article on the vulnerability of the FTP protocol and dated as early as April 1996, theoretically the vulnerability of the FTP protocol if it is incorrectly implemented. Two points are interesting in the article,...

Mandrake Linux Security Advisory : sendmail (MDKSA-2006:156)

Moritz Jodeit discovered a vulnerability in sendmail when processing very long header lines that could be exploited to cause a Denial of Service by crashing sendmail. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Sendmail 8.6.9 IDENT远程缓冲区溢出漏洞

Sendmail是一个广为使用的Internet邮件传输程序。 8.6.9版本的Sendmail的IDENT功能实现上存在缓冲区溢出漏洞，远程攻击者可以利用此漏洞直接得到主机的root权限。 Eric Allman Sendmail 8.6.9 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 关闭IDENT协议功能 在Sendmail的配置文件中加入： Orident=0 然后重启Sendmail。 厂商补丁： Eric Allman ----------- 目前厂商已经在新版的软件中修复了这个安全问题，请到厂商的主页下载：...

Sendmail 8.11.x Exploit (i386-Linux)

No description provided by source. / sendmail 8.11.x exploit i386-Linux by [email protected] sd@ircnet This code exploits well-known local-root bug in sendmail 8.11.x, 8.12.x may be vulnerable too, but I didn't test it. It gives instant root shell with +s sendmail 8.11.x, x 6 We're using objdump, gdb & gr...

Debian DSA-1015-1 : sendmail - programming error

Mark Dowd discovered a flaw in the handling of asynchronous signals in sendmail, a powerful, efficient, and scalable mail transport agent. This allows a remote attacker to exploit a race condition to execute arbitrary code as root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-1155-2 : sendmail - programming error

It turned out that the sendmail binary depends on libsasl2 = 2.1.19.dfsg1 which is neither available in the stable nor in the security archive. This version is scheduled for the inclusion in the next update of the stable release, though. You'll have to download the referenced file for your...

Debian DSA-902-1 : xmail - buffer overflow

A buffer overflow has been discovered in the sendmail program of xmail, an advanced, fast and reliable ESMTP/POP3 mail server that could lead to the execution of arbitrary code with group mail privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Debian DSA-1164-1 : sendmail - programming error

A programming error has been discovered in sendmail, an alternative mail transport agent for Debian, that could allow a remote attacker to crash the sendmail process by sending a specially crafted email message. Please note that in order to install this update you also need libsasl2 library from...

[SECURITY] [DSA 1164-1] New sendmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1164-1 [email protected] http://www.debian.org/security/ Noah Meyerhans August 31st, 2006 http://www.debian.org/security/faq -...

DSA-1164 sendmail - programming error

Bulletin has no description...

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...

DEBIAN-CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...

PT-2006-5235 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail versions prior to 8.13.8 Description: A use-after-free issue allows remote attackers to cause a denial of service, potentially crashing the system via a long "header line", which causes a previously freed variable to be referenced. T...

005: SECURITY FIX: August 25, 2006

A potential denial of service problem has been found in sendmail. A message with really long header lines could trigger a use-after-free bug causing sendmail to crash. Apply by doing: cd /usr/src patch -p0 005sendmail3.patch And then rebuild and install sendmail: cd gnu/usr.sbin/sendmail make obj...

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...

VulnCheck KEV: CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...

CVE-2006-4434

CVE-2006-4434 affects Sendmail before 8.13.8, with a use-after-free in header processing that can crash the daemon and cause a denial of service. Context from the initial entry notes the vendor’s dispute on severity, but multiple vulnerability advisories and patch plugins confirm the issue and re...

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...