remote code execution in sendmail

2006-03-2217:13:36

lists.opensuse.org

0.94 High

EPSS

Percentile

98.9%

JSON

The popular MTA sendmail is vulnerable to a race condition when handling signals. Under certain circumstances this bug can be exploited by an attacker to execute commands remotely. Sendmail was the default MTA in SuSE Linux Enterprise Server 8. Later products use postfix as MTA. Thanks to Mark Dowd who found this bug.

Solution

There is no work-around known.

OSVersionArchitecturePackageVersionFilename
openSUSE9.3i586sendmail< 8.13.3-5.3sendmail-8.13.3-5.3.i586.rpm
openSUSE9.1x86_64sendmail< 8.12.11-2.2sendmail-8.12.11-2.2.x86_64.rpm
openSUSE9.2x86_64sendmail< 8.13.1-5.3sendmail-8.13.1-5.3.x86_64.rpm
openSUSE9.1i586sendmail< 8.12.11-2.2sendmail-8.12.11-2.2.i586.rpm
openSUSE9.3x86_64sendmail< 8.13.3-5.3sendmail-8.13.3-5.3.x86_64.rpm
openSUSE9.2i586sendmail< 8.13.1-5.3sendmail-8.13.1-5.3.i586.rpm
openSUSE10.0i586sendmail< 8.13.4-8.3sendmail-8.13.4-8.3.i586.rpm
openSUSE10.0ppcsendmail< 8.13.4-8.3sendmail-8.13.4-8.3.ppc.rpm
openSUSE10.0x86_64sendmail< 8.13.4-8.3sendmail-8.13.4-8.3.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	9.3	i586	sendmail	< 8.13.3-5.3	sendmail-8.13.3-5.3.i586.rpm
openSUSE	9.1	x86_64	sendmail	< 8.12.11-2.2	sendmail-8.12.11-2.2.x86_64.rpm
openSUSE	9.2	x86_64	sendmail	< 8.13.1-5.3	sendmail-8.13.1-5.3.x86_64.rpm
openSUSE	9.1	i586	sendmail	< 8.12.11-2.2	sendmail-8.12.11-2.2.i586.rpm
openSUSE	9.3	x86_64	sendmail	< 8.13.3-5.3	sendmail-8.13.3-5.3.x86_64.rpm
openSUSE	9.2	i586	sendmail	< 8.13.1-5.3	sendmail-8.13.1-5.3.i586.rpm
openSUSE	10.0	i586	sendmail	< 8.13.4-8.3	sendmail-8.13.4-8.3.i586.rpm
openSUSE	10.0	ppc	sendmail	< 8.13.4-8.3	sendmail-8.13.4-8.3.ppc.rpm
openSUSE	10.0	x86_64	sendmail	< 8.13.4-8.3	sendmail-8.13.4-8.3.x86_64.rpm

remote code execution in sendmail

Solution

Related