exploits , vulnerabilities , articles , Sendmail Asynchronous Signal Handling Remote Code Execution Vulnerability

Title	Sendmail Asynchronous Signal Handling Remote Code Execution Vulnerability
Published	2006-03-22-12:00AM
Updated	2006-03-22-10:39PM
Class	Race Condition Error
CVE	CVE-2006-0058
Remote	Yes
Local	No
Credit	Discovered by Mark Dowd.
Vulnerable	Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux current Sendmail Consortium Sendmail 8.13.5 Sendmail Consortium Sendmail 8.13.3 Sendmail Consortium Sendmail 8.12.11 Sendmail Consortium Sendmail 8.12.9 Sendmail Consortium Sendmail 8.12.8 RedHat Linux 9.0 i386 RedHat Linux 8.0 i386 Yellow Dog Linux 3.0 Sendmail Consortium Sendmail 8.12.7 OpenPKG OpenPKG 1.2 Slackware Linux 8.1 SOTLinux SOTLinux 2003 Desktop SOTLinux SOTLinux 2003 Server Sendmail Consortium Sendmail 8.12.6 Sendmail Consortium Sendmail 8.12.5 Sendmail Consortium Sendmail 8.12.4 Sendmail Consortium Sendmail 8.12.3 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia64 Debian Linux 3.0 ia32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 FreeBSD FreeBSD 4.6 S.u.S.E. Linux 8.0 i386 S.u.S.E. Linux 8.0 Sendmail Consortium Sendmail 8.12.2 Sendmail Consortium Sendmail 8.12.1 HP MPE/iX 7.5 HP MPE/iX 7.0 MandrakeSoft Linux Mandrake 8.2 ppc MandrakeSoft Linux Mandrake 8.2 Sendmail Consortium Sendmail 8.12 beta7 Sendmail Consortium Sendmail 8.12 beta5 Sendmail Consortium Sendmail 8.12 beta16 Sendmail Consortium Sendmail 8.12 beta12 Sendmail Consortium Sendmail 8.12 beta10 Sendmail Consortium Sendmail 8.12 .10 Sendmail Consortium Sendmail 8.12 .0 Sendmail Consortium Sendmail 8.11.7 Sendmail Consortium Sendmail 8.11.6 Sendmail Consortium Sendmail 8.11.5 Sendmail Consortium Sendmail 8.11.4 Conectiva Linux 7.0 Slackware Linux 8.0 Sendmail Consortium Sendmail 8.11.3 Sendmail Consortium Sendmail 8.11.2 RedHat Linux 7.1 ia64 RedHat Linux 7.1 i386 RedHat Linux 7.1 alpha RedHat Linux 7.1 S.u.S.E. Linux 7.1 x86 S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 Sendmail Consortium Sendmail 8.11.1 Sendmail Consortium Sendmail 8.11 Compaq Tru64 5.1 b Compaq Tru64 5.1 a Compaq Tru64 5.1 IBM AIX 5.2 IBM AIX 5.1 MandrakeSoft Linux Mandrake 7.2 RedHat Linux 7.0 sparc RedHat Linux 7.0 i386 RedHat Linux 7.0 alpha RedHat Linux 7.0 S.u.S.E. Linux 7.0 sparc S.u.S.E. Linux 7.0 ppc S.u.S.E. Linux 7.0 alpha S.u.S.E. Linux 7.0 SCO Open Server 5.0.6 a SCO Open Server 5.0.6 SCO Open Server 5.0.5 SCO Open Server 5.0.4 Sendmail Consortium Sendmail 8.10.2 Sendmail Consortium Sendmail 8.10.1 Sendmail Consortium Sendmail 8.10 Sendmail Consortium Sendmail 8.9.3 Compaq Tru64 5.1 PK5 (BL19) Compaq Tru64 5.0 a PK3 (BL17) Debian Linux 2.2 sparc Debian Linux 2.2 powerpc Debian Linux 2.2 IA32 Debian Linux 2.2 arm Debian Linux 2.2 alpha Debian Linux 2.2 68k Debian Linux 2.2 IBM AIX 4.3.3 SGI IRIX 6.5.19 SGI IRIX 6.5.18 m SGI IRIX 6.5.18 f SGI IRIX 6.5.17 m SGI IRIX 6.5.17 f SGI IRIX 6.5.16 m SGI IRIX 6.5.16 f SGI IRIX 6.5.15 m SGI IRIX 6.5.15 f SGI IRIX 6.5.14 m SGI IRIX 6.5.14 f SGI IRIX 6.5.13 m SGI IRIX 6.5.13 f SGI IRIX 6.5.12 m SGI IRIX 6.5.12 f SGI IRIX 6.5.11 m SGI IRIX 6.5.11 f SGI IRIX 6.5.10 m SGI IRIX 6.5.10 f SGI IRIX 6.5.9 m SGI IRIX 6.5.9 f SGI IRIX 6.5.8 m SGI IRIX 6.5.8 f SGI IRIX 6.5.7 m SGI IRIX 6.5.7 f Sendmail Consortium Sendmail 8.9.2 Sendmail Consortium Sendmail 8.9.1 Sendmail Consortium Sendmail 8.9 .0 Sendmail Consortium Sendmail 8.8.8 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux Enterprise Server 8 OpenPKG OpenPKG 2.5 OpenPKG OpenPKG 2.4 OpenPKG OpenPKG 2.3 IBM AIX 5.3 L IBM AIX 5.3 IBM AIX 5.2 L IBM AIX 5.2 IBM AIX 5.1 L IBM AIX 5.1 Gentoo Linux FreeBSD FreeBSD 6.0 STABLE FreeBSD FreeBSD 6.0 RELEASE FreeBSD FreeBSD 5.4 RELENG FreeBSD FreeBSD 5.4 RELEASE FreeBSD FreeBSD 5.4 PRERELEASE FreeBSD FreeBSD 5.3 STABLE FreeBSD FreeBSD 5.3 RELENG FreeBSD FreeBSD 5.3 RELEASE FreeBSD FreeBSD 5.3 FreeBSD FreeBSD 5.2.1 RELEASE FreeBSD FreeBSD 5.2 RELENG FreeBSD FreeBSD 5.2 RELEASE FreeBSD FreeBSD 5.2 FreeBSD FreeBSD 5.1 RELENG FreeBSD FreeBSD 5.1 RELEASE/Alpha FreeBSD FreeBSD 5.1 RELEASEp5 FreeBSD FreeBSD 5.1 RELEASE FreeBSD FreeBSD 5.1 FreeBSD FreeBSD 5.0 RELENG FreeBSD FreeBSD 5.0 RELEASEp14 FreeBSD FreeBSD 5.0 alpha FreeBSD FreeBSD 5.0 FreeBSD FreeBSD 4.11 STABLE FreeBSD FreeBSD 4.11 RELENG FreeBSD FreeBSD 4.11 RELEASEp3 FreeBSD FreeBSD 4.10 RELENG FreeBSD FreeBSD 4.10 RELEASEp8 FreeBSD FreeBSD 4.10 RELEASE FreeBSD FreeBSD 4.10 FreeBSD FreeBSD 4.9 RELENG FreeBSD FreeBSD 4.9 PRERELEASE FreeBSD FreeBSD 4.9 FreeBSD FreeBSD 4.8 RELENG FreeBSD FreeBSD 4.8 RELEASEp7 FreeBSD FreeBSD 4.8 PRERELEASE FreeBSD FreeBSD 4.8 FreeBSD FreeBSD 4.7 STABLE FreeBSD FreeBSD 4.7 RELENG FreeBSD FreeBSD 4.7 RELEASEp17 FreeBSD FreeBSD 4.7 RELEASE FreeBSD FreeBSD 4.7 FreeBSD FreeBSD 4.6.2 FreeBSD FreeBSD 4.6 STABLE FreeBSD FreeBSD 4.6 RELENG FreeBSD FreeBSD 4.6 RELEASEp20 FreeBSD FreeBSD 4.6 RELEASE FreeBSD FreeBSD 4.6 FreeBSD FreeBSD 4.5 STABLEpre20020307 FreeBSD FreeBSD 4.5 STABLE FreeBSD FreeBSD 4.5 RELENG FreeBSD FreeBSD 4.5 RELEASEp32 FreeBSD FreeBSD 4.5 RELEASE FreeBSD FreeBSD 4.5 FreeBSD FreeBSD 4.4 STABLE FreeBSD FreeBSD 4.4 RELENG FreeBSD FreeBSD 4.4 RELENG FreeBSD FreeBSD 4.4 RELEASEp42 FreeBSD FreeBSD 4.4 FreeBSD FreeBSD 4.3 STABLE FreeBSD FreeBSD 4.3 RELENG FreeBSD FreeBSD 4.3 RELEASEp38 FreeBSD FreeBSD 4.3 RELEASE FreeBSD FreeBSD 4.3 FreeBSD FreeBSD 4.2 STABLEpre122300 FreeBSD FreeBSD 4.2 STABLEpre050201 FreeBSD FreeBSD 4.2 STABLE FreeBSD FreeBSD 4.2 RELEASE FreeBSD FreeBSD 4.2 FreeBSD FreeBSD 4.1.1 STABLE FreeBSD FreeBSD 4.1.1 RELEASE FreeBSD FreeBSD 4.1.1 FreeBSD FreeBSD 4.1 FreeBSD FreeBSD 4.0 .x FreeBSD FreeBSD 4.0 RELENG FreeBSD FreeBSD 4.0 alpha FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 3.5.1 STABLEpre20010720 FreeBSD FreeBSD 3.5.1 STABLE FreeBSD FreeBSD 3.5.1 RELEASE FreeBSD FreeBSD 3.5.1 FreeBSD FreeBSD 3.5 x FreeBSD FreeBSD 3.5 STABLEpre122300 FreeBSD FreeBSD 3.5 STABLEpre050201 FreeBSD FreeBSD 3.5 STABLE FreeBSD FreeBSD 3.5 FreeBSD FreeBSD 3.4 x FreeBSD FreeBSD 3.4 FreeBSD FreeBSD 3.3 x FreeBSD FreeBSD 3.3 FreeBSD FreeBSD 3.2 x FreeBSD FreeBSD 3.2 FreeBSD FreeBSD 3.1 x FreeBSD FreeBSD 3.1 FreeBSD FreeBSD 3.0 RELENG FreeBSD FreeBSD 3.0 FreeBSD FreeBSD 2.2.8 FreeBSD FreeBSD 2.2.6 FreeBSD FreeBSD 2.2.5 FreeBSD FreeBSD 2.2.4 FreeBSD FreeBSD 2.2.3 FreeBSD FreeBSD 2.2.2 FreeBSD FreeBSD 2.2 x FreeBSD FreeBSD 2.2 FreeBSD FreeBSD 2.1.7 .1 FreeBSD FreeBSD 2.1.6 .1 FreeBSD FreeBSD 2.1.6 FreeBSD FreeBSD 2.1.5 FreeBSD FreeBSD 2.1 x FreeBSD FreeBSD 2.1 FreeBSD FreeBSD 2.0.5 FreeBSD FreeBSD 2.0 FreeBSD FreeBSD 1.1.5 .1 FreeBSD FreeBSD 5.4STABLE FreeBSD FreeBSD 4.10PRERELEASE FreeBSD FreeBSD 3.x FreeBSD FreeBSD 2.x
Not Vulnerable	Sendmail Consortium Sendmail 8.13.6
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability