Critical: Red Hat Security Advisory: sendmail security update

Updated Sendmail packages are available to fix a vulnerability that allows local and possibly remote attackers to gain root privileges. Sendmail is a widely used Mail Transport Agent MTA which is included in all Red Hat Enterprise Linux distributions. There is a vulnerability in Sendmail versions...

ISS Security Brief: Email Processing Vulnerability in Sendmail

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 29, 2003 Email Processing Vulnerability in Sendmail Synopsis: ISS X-Force is researching a public report of an email header processing buffer overflow vulnerability in Sendmail. This report was made public on March...

sendmail 8.12.9 available

-----BEGIN PGP SIGNED MESSAGE----- Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.12.9. It contains a fix for a critical security problem discovered by Michal Zalewski whom we thank for bringing this problem to our attention. Sendmail urges all users to either...

CERT Advisory CA-2003-12 Buffer Overflow in Sendmail

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-12 Buffer Overflow in Sendmail Original release date: March 29, 2003 Last revised: Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Sendmail Pro all versions Sendmail Switch 2.1 prior to 2.1...

Sendmail: -1 gone wild

CVE: CAN-2003-0161 CERT: VU897604 FORCED RELEASE -- VENDOR NOTIFIED AS OF 03/18/03 There is a vulnerability in Sendmail versions 8.12.8 and prior. The address parser performs insufficient bounds checking in certain conditions due to a char to int conversion, making it possible for an attacker to...

FreeBSD-SA-03:07.sendmail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:07.sendmail Security Advisory The FreeBSD Project Topic: a second sendmail header parsing buffer overflow Category: contrib Module: contribsendmail Announced:...

Sendmail buffer overflow fixed (NEW)

The sendmail packages in Slackware 8.0, 8.1, and 9.0 have been patched to fix a security problem. Note that this vulnerablity is NOT the same one that was announced on March 3rd and requires a new fix. All sites running sendmail should upgrade. More information on the problem can be found here:...

Sendmail 8.11.6 - Address Prescan Memory Corruption

/ source: https://www.securityfocus.com/bid/7230/info A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers. This condition has been confirmed to be exploitable ...

Sendmail < 8.12.9 NOCHAR Control Value prescan Overflow

The remote Sendmail server, according to its version number, may be vulnerable to a remote buffer overflow allowing remote users to gain root privileges. Sendmail versions from 5.79 to 8.12.8 are vulnerable. NOTE: manual patches do not change the version numbers. Vendors who have released patched...

Sendmail Address Prescan Memory Corruption Vulnerability

Description A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers. This condition has been confirmed to be exploitable by remote attackers to execute instruction...

Sendmail 8.11.6 - Address Prescan Memory Corruption

Sendmail 8.11.6 - Address Prescan Memory Corruption / source: https://www.securityfocus.com/bid/7230/info A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers...

Sendmail address parsing buffer overflow

Overview Sendmail contains a buffer overflow in code that parses email addresses. A remote attacker could execute arbitrary code or cause a denial of service on a vulnerable system. Description Sendmail is a widely used mail transfer agent MTA. There is a stack overflow vulnerability in code that...

Solaris sendmail .forward Local Privilege Escalation

The remote sendmail server, according to its version number, may be vulnerable to a local privilege escalation attack when using forward files. Sun did not increase the version number of their sendmail when patching Solaris 7 and 8, so this might be a false positive on these platforms. An attacke...

Sendmail < 8.9.3 Header Prescan Function Message Header DoS

The remote Sendmail server, according to its version number, allows remote attackers cause a denial of service by sending messages with a large number of headers. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised plugin title, output formatting, soluti...

Sendmail < 8.7.6 Multiple Local Vulnerabilities

The remote Sendmail server, according to its version number, has a buffer overflow and denial of service problem. Using a flaw in the GECOS field handling, it may allow a local user to gain root access. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised...

Sendmail Crafted ETRN Commands Remote DoS

The remote Sendmail server, according to its version number, allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated. C Tenable Network...

Sendmail < 8.8.3 Daemon Mode Local Privilege Escalation

The remote Sendmail server, according to its version number, allows local user to start it in daemon mode and gain root privileges. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised plugin title, output formatting 9/14/09 - Updated to use compat.inc,...

Sendmail < 8.8.4 Group Write File Hardlink Privilege Escalation

The remote Sendmail server, according to its version number, allows local users to write to a file and gain group permissions via a .forward or :include: file. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised plugin title, output formatting 9/14/09 -...

Sendmail < 8.10.0 mail.local Newline Handling Remote DoS

mail.local in the remote Sendmail server, according to its version number, does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends ...

Sendmail < 8.6.8 -debug Local Privilege Escalation

The remote Sendmail server, according to its version number, allows local users to gain root access via a large value in the debug -d command line option. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised plugin title, output formatting 9/16/09 - Updat...