[SECURITY] [DSA 278-1] New sendmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 278-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 278-1] New sendmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 278-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2003 http://www.debian.org/security/faq -...

DSA-278 sendmail - char-to-int conversion

Bulletin has no description...

CVE-1999-1468

CVE-1999-1468 affects rdist in various UNIX systems. The vulnerability arises when rdist uses popen to invoke sendmail, enabling local users to gain root privileges by modifying the IFS (Internal Field Separator) variable. The provided sources confirm the component and the privileged escalation v...

CVE-2002-0906

Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server...

CVE-2001-1349

CVE-2001-1349 affects Sendmail before 8.11.4 and before 8.12.0.Beta10; the issue is described as local denial of service with possible heap corruption and privilege escalation due to race conditions in signal handlers. OpenVAS additionally notes a remote header buffer overflow for Sendmail 5.79–8...

CVE-2001-1349

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers...

CVE-2002-0906

CVE-2002-0906 describes a buffer overflow in Sendmail before 8.12.5 when configured to use a custom DNS map to query TXT records. A malicious DNS server could trigger the overflow, allowing a remote attacker to cause a denial of service and, potentially, execute arbitrary code on the affected hos...

CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

CVE-2002-0906

Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server...

DEBIAN-CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

CVE-2003-0161

Technical details for CVE-2003-0161 are not publicly provided in the supplied documents; monitor for updates from the connected advisories and feeds.

CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

Critical: Red Hat Security Advisory: : Updated sendmail packages fix vulnerability

Updated Sendmail packages are available to fix a vulnerability that allows local and possibly remote attackers to gain root privileges. Sendmail is a widely used Mail Transport Agent MTA which is included in all Red Hat Linux distributions. There is a vulnerability in Sendmail versions prior to a...

Critical: Red Hat Security Advisory: sendmail security update

Updated Sendmail packages are available to fix a vulnerability that allows local and possibly remote attackers to gain root privileges. Sendmail is a widely used Mail Transport Agent MTA which is included in all Red Hat Enterprise Linux distributions. There is a vulnerability in Sendmail versions...

ISS Security Brief: Email Processing Vulnerability in Sendmail

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 29, 2003 Email Processing Vulnerability in Sendmail Synopsis: ISS X-Force is researching a public report of an email header processing buffer overflow vulnerability in Sendmail. This report was made public on March...

sendmail 8.12.9 available

-----BEGIN PGP SIGNED MESSAGE----- Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.12.9. It contains a fix for a critical security problem discovered by Michal Zalewski whom we thank for bringing this problem to our attention. Sendmail urges all users to either...

CERT Advisory CA-2003-12 Buffer Overflow in Sendmail

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-12 Buffer Overflow in Sendmail Original release date: March 29, 2003 Last revised: Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Sendmail Pro all versions Sendmail Switch 2.1 prior to 2.1...