1640 matches found
Sendmail <= 8.13.5 Remote Signal Handling Exploit PoC
Exploit for linux platform in category dos / poc ===================================================== Sendmail 1: IP = sys.argv1 ifargc 2: defarch = intsys.argv2 ifargc 3: PORT = intsys.argv3 def ia32o: s='' w=chri % 256 o = o 8 x=chri % 256 o = o 8 y=chri % 256 o =...
CentOS 3 / 4 : sendmail (CESA-2006:0515)
Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Red Hat Enterprise Linux 3 have been updated to the...
CentOS 3 / 4 : sendmail (CESA-2006:0264)
Updated sendmail packages to fix a security issue are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Sendmail is a Mail Transport Agent MTA used to send mail between machines. A flaw in the...
sendmail security update
CentOS Errata and Security Advisory CESA-2006:0515-01 Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Re...
Mandrake Linux Security Advisory : sendmail (MDKSA-2006:104)
A vulnerability in the way Sendmail handles multi-part MIME messages was discovered that could allow a remote attacker to create a carefully crafted message that could crash the sendmail process during delivery. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C...
GLSA-200606-19 : Sendmail: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200606-19 Sendmail: Denial of Service Frank Sheiness discovered that the mime8to7 function can recurse endlessly during the decoding of multipart MIME messages until the stack of the process is filled and the process crashes. Impa...
RHEL 2.1 / 3 / 4 : sendmail (RHSA-2006:0515)
Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Red Hat Enterprise Linux 3 have been updated to the...
Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : sendmail (SSA:2006-166-01)
New sendmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a possible denial-of-service issue. Sendmail's complete advisory may be found here: http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc Sendmail has also provided an FAQ about this...
[slackware-security] sendmail
New sendmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a possible denial-of-service issue. Sendmail's complete advisory may be found here: http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc Sendmail has also provided an FAQ about this...
Sendmail < 8.13.7 Multi-part MIME Message Handling DoS
Binary data 3653.prm...
Sendmail multipart messages DoS
High recurscion level in multipart MIME messages causes stack overflow exhaustion, not overrun...
Sendmail: Denial of service
Background Sendmail is a popular mail transfer agent MTA. Description Frank Sheiness discovered that the mime8to7 function can recurse endlessly during the decoding of multipart MIME messages until the stack of the process is filled and the process crashes. Impact By sending specially crafted...
Sendmail 8.13.7
sendmail.org Sendmail 8.13.7 Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.13.7. It fixes a potential denial of service problem caused by excessive recursion which leads to stack exhaustion when attempting delivery of a malformed MIME message. Therefore, the...
sendmail security update
CentOS Errata and Security Advisory CESA-2006:0515 Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Red H...
security flaw
Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and migh...
Important: Red Hat Security Advisory: sendmail security update
Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Red Hat Enterprise Linux 3 have been updated to the...
FreeBSD-SA-06:17.sendmail
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:17.sendmail Security Advisory The FreeBSD Project Topic: Incorrect multipart message handling in Sendmail Category: contrib Module: contribsendmail Announced:...
sendmail -- Incorrect multipart message handling
Problem Description A suitably malformed multipart MIME message can cause sendmail to exceed predefined limits on its stack usage. Impact An attacker able to send mail to, or via, a server can cause queued messages on the system to not be delivered, by causing the sendmail process which handles...
Sendmail fails to handle malformed multipart MIME messages
Overview Sendmail does not properly handle malformed multipart MIME messages. This vulnerability may allow a remote, unauthenticated attacker to cause a denial-of-service condition. Description Sendmail Sendmail is a widely used mail transfer agent MTA. Mail Transfer Agents MTA MTAs are responsib...
GUESTEX-exec.pl.txt
Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: GUESTEX-exec.pl Date: 06/07/2006 Version: 1.00 1.00 06/07/2006 - GUESTEX-exec.pl created Description: GUESTEX guestbook is vulnerable to remote code execution in how it handles it's 'email' parameter. $form'email' is used when openni...