Sendmail: -1 gone wild

CVE: CAN-2003-0161 CERT: VU897604 FORCED RELEASE -- VENDOR NOTIFIED AS OF 03/18/03 There is a vulnerability in Sendmail versions 8.12.8 and prior. The address parser performs insufficient bounds checking in certain conditions due to a char to int conversion, making it possible for an attacker to...

FreeBSD-SA-03:07.sendmail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:07.sendmail Security Advisory The FreeBSD Project Topic: a second sendmail header parsing buffer overflow Category: contrib Module: contribsendmail Announced:...

Sendmail buffer overflow fixed (NEW)

The sendmail packages in Slackware 8.0, 8.1, and 9.0 have been patched to fix a security problem. Note that this vulnerablity is NOT the same one that was announced on March 3rd and requires a new fix. All sites running sendmail should upgrade. More information on the problem can be found here:...

Sendmail 8.11.6 - Address Prescan Memory Corruption

/ source: https://www.securityfocus.com/bid/7230/info A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers. This condition has been confirmed to be exploitable ...

Sendmail < 8.12.9 NOCHAR Control Value prescan Overflow

The remote Sendmail server, according to its version number, may be vulnerable to a remote buffer overflow allowing remote users to gain root privileges. Sendmail versions from 5.79 to 8.12.8 are vulnerable. NOTE: manual patches do not change the version numbers. Vendors who have released patched...

Sendmail 8.11.6 - Address Prescan Memory Corruption

Sendmail 8.11.6 - Address Prescan Memory Corruption / source: https://www.securityfocus.com/bid/7230/info A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers...

Sendmail Address Prescan Memory Corruption Vulnerability

Description A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers. This condition has been confirmed to be exploitable by remote attackers to execute instruction...

Sendmail address parsing buffer overflow

Overview Sendmail contains a buffer overflow in code that parses email addresses. A remote attacker could execute arbitrary code or cause a denial of service on a vulnerable system. Description Sendmail is a widely used mail transfer agent MTA. There is a stack overflow vulnerability in code that...

Solaris sendmail .forward Local Privilege Escalation

The remote sendmail server, according to its version number, may be vulnerable to a local privilege escalation attack when using forward files. Sun did not increase the version number of their sendmail when patching Solaris 7 and 8, so this might be a false positive on these platforms. An attacke...

Sendmail < 8.8.4 Group Write File Hardlink Privilege Escalation

The remote Sendmail server, according to its version number, allows local users to write to a file and gain group permissions via a .forward or :include: file. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised plugin title, output formatting 9/14/09 -...

Sendmail < 8.7.6 Multiple Local Vulnerabilities

The remote Sendmail server, according to its version number, has a buffer overflow and denial of service problem. Using a flaw in the GECOS field handling, it may allow a local user to gain root access. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised...

Sendmail Crafted ETRN Commands Remote DoS

The remote Sendmail server, according to its version number, allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated. C Tenable Network...

Sendmail < 8.8.3 Daemon Mode Local Privilege Escalation

The remote Sendmail server, according to its version number, allows local user to start it in daemon mode and gain root privileges. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised plugin title, output formatting 9/14/09 - Updated to use compat.inc,...

Sendmail < 8.9.3 Header Prescan Function Message Header DoS

The remote Sendmail server, according to its version number, allows remote attackers cause a denial of service by sending messages with a large number of headers. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised plugin title, output formatting, soluti...

Sendmail < 8.6.8 -debug Local Privilege Escalation

The remote Sendmail server, according to its version number, allows local users to gain root access via a large value in the debug -d command line option. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised plugin title, output formatting 9/16/09 - Updat...

Sendmail < 8.10.0 mail.local Newline Handling Remote DoS

mail.local in the remote Sendmail server, according to its version number, does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends ...

DEBIAN-CVE-2002-1337

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c...

CVE-2002-1337

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c...

CVE-2002-1337

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c...

PT-2003-1143 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail versions 5.79 through 8.12.7 Description: The issue allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of...