1808 matches found
CVE-2009-4565
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...
Design/Logic Flaw
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...
CVE-2009-4565
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...
CVE-2009-4565
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...
CVE-2009-4565
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...
CVE-2009-4565
CVE-2009-4565 affects sendmail up to version 8.14.3; the vulnerability arises from improper handling of a ‘\0’ character in the Common Name (CN) field of X.509 certificates. This flaw enables MITM spoofing of SSL-based SMTP servers via a crafted server certificate from a trusted CA and could allo...
Sendmail Update Patches Memory Leak Flaws
Version 8.14.4 of Sendmail, the open source mail transfer agent MTA, includes fixes for several security vulnerabilities including some integer overflows, memory leaks and for the SSL NUL character problem disclosed in mid 2009. Read the full article. The H Security...
Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
Sendmail is prone to a security bypass vulnerability because the application fails to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might ...
CVE-2009-4565: Undefined Security Weakness
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...
Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
Sendmail is prone to a security-bypass vulnerability because the application fails to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones. Successfully exploiting this issue allows attackers to perform...
HP-UX PHNE_40388 : HP-UX Running sendmail, Remote Denial of Service (DoS) (HPSBUX02495 SSRT090151 rev.2)
s700800 11.23 sendmail1M 8.11.1 patch : A potential security vulnerability has been identified with HP-UX running sendmail. This vulnerability could allow a remote user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in...
HP-UX PHNE_40393 : HP-UX Running sendmail, Remote Denial of Service (DoS) (HPSBUX02495 SSRT090151 rev.2)
s700800 11.11 sendmail1M 8.9.3 patch : A potential security vulnerability has been identified with HP-UX running sendmail. This vulnerability could allow a remote user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in...
Sendmail Header Processing Buffer Overflow (CVE-2002-1337)
Sendmail is a general purpose internetwork email routing facility that supports many kinds of mail-transfer and mail-delivery methods, including the Simple Mail Transfer Protocol SMTP used for email transport over the Internet. There exists a buffer overflow vulnerability in Sendmail 5.79 to 8.12...
Fedora Core 12 FEDORA-2009-12395 (php-pear-Mail)
The remote host is missing an update to php-pear-Mail announced via advisory FEDORA-2009-12395. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...
[SECURITY] Fedora 10 Update: php-pear-Mail-1.1.14-5.fc10
PEAR's Mail package defines an interface for implementing mailers under the PEAR hierarchy. It also provides supporting functions useful to multiple mailer backends. Currently supported backends include: PHP's native mail function, sendmail, and SMTP. This package also provides a RFC822 email...
[SECURITY] Fedora 12 Update: php-pear-Mail-1.1.14-5.fc12
PEAR's Mail package defines an interface for implementing mailers under the PEAR hierarchy. It also provides supporting functions useful to multiple mailer backends. Currently supported backends include: PHP's native mail function, sendmail, and SMTP. This package also provides a RFC822 email...
[SECURITY] Fedora 11 Update: php-pear-Mail-1.1.14-5.fc11
PEAR's Mail package defines an interface for implementing mailers under the PEAR hierarchy. It also provides supporting functions useful to multiple mailer backends. Currently supported backends include: PHP's native mail function, sendmail, and SMTP. This package also provides a RFC822 email...
Fedora 12 : php-pear-Mail-1.1.14-5.fc12 (2009-12395)
Fix CVE-2009-4023, CVE-2009-4111 PEAR's Mail class did not properly escape content of mail header fields, when using the sendmail backend. A remote attacker could send an email message, with specially crafted headers to local user, leading to disclosure of content and potentially, to modification...
Fedora 10 : php-pear-Mail-1.1.14-5.fc10 (2009-12439)
Fix CVE-2009-4023, CVE-2009-4111 PEAR's Mail class did not properly escape content of mail header fields, when using the sendmail backend. A remote attacker could send an email message, with specially crafted headers to local user, leading to disclosure of content and potentially, to modification...
Fedora 11 : php-pear-Mail-1.1.14-5.fc11 (2009-12348)
Fix CVE-2009-4023, CVE-2009-4111 PEAR's Mail class did not properly escape content of mail header fields, when using the sendmail backend. A remote attacker could send an email message, with specially crafted headers to local user, leading to disclosure of content and potentially, to modification...