sendmail security and bug fix update

8.13.1-6 - rpm attributes S,5,T not recorded for statistics file - fix specfile for passing rpm -V test 8.13.1-5 - recompile with -fno-strict-aliasing - fix typo, purge-mqueue script - remove README.certcnnul 8.13.1-4 - fix CVE-2009-4565 554987 - fix MAXHOSTNAMELEN 485380 - fix stale files in...

Sendmail < 8.13.2 Mail X-Header Handling Remote Overflow

The remote host is running a version of the Sendmail mail server earlier than 8.13.2. Such versions are reportedly affected by a remote buffer overflow vulnerability. An attacker could leverage this flaw to execute arbitrary code with the privileges of the affected application. C Tenable Network...

CVE-2009-1490

Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header...

CVE-2009-1490

CVE-2009-1490 is a heap-based buffer overflow in Sendmail prior to 8.13.2 triggered by a long X-header, e.g., an X-Testing header. Public sources (OSV, Nessus/OpenVAS entries) describe remote exploitation that could cause a denial of service (daemon crash) and possibly allow arbitrary code execut...