exploits , vulnerabilities , articles , Sendmail Long Header Denial Of Service Vulnerability

Title	Sendmail Long Header Denial Of Service Vulnerability
Published	2006-08-25-12:00AM
Updated	2006-08-25-12:00AM
Class	Failure to Handle Exceptional Conditions
CVE
Remote	Yes
Local	No
Credit	This issue was disclosed in the referenced OpenBSD advisory.
Vulnerable	Sendmail Consortium Sendmail 8.13.7 Sendmail Consortium Sendmail 8.13.6 Sendmail Consortium Sendmail 8.13.5 Sendmail Consortium Sendmail 8.13.4 Sendmail Consortium Sendmail 8.13.3 Sendmail Consortium Sendmail 8.12.11 Sendmail Consortium Sendmail 8.12.9 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux current Sendmail Consortium Sendmail 8.12.8 RedHat Linux 9.0 i386 RedHat Linux 8.0 i386 Yellow Dog Linux 3.0 Sendmail Consortium Sendmail 8.12.7 OpenPKG OpenPKG 1.2 Slackware Linux 8.1 SOTLinux SOTLinux 2003 Desktop SOTLinux SOTLinux 2003 Server Sendmail Consortium Sendmail 8.12.6 Apple Mac OS X 10.2.4 Conectiva Linux Enterprise Edition 1.0 FreeBSD FreeBSD 5.0 FreeBSD FreeBSD 4.7 MandrakeSoft Corporate Server 2.1 MandrakeSoft Linux Mandrake 9.0 OpenBSD OpenBSD 3.2 S.u.S.E. Linux 8.1 Sendmail Consortium Sendmail 8.12.5 Conectiva Linux 9.0 OpenBSD OpenBSD 3.2 Sendmail Consortium Sendmail 8.12.4 OpenBSD OpenBSD 3.2 Slackware Linux 8.1 Slackware Linux current Sendmail Consortium Sendmail 8.12.3 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia64 Debian Linux 3.0 ia32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 FreeBSD FreeBSD 4.6 S.u.S.E. Linux 8.0 i386 S.u.S.E. Linux 8.0 Sendmail Consortium Sendmail 8.12.2 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 OpenBSD OpenBSD 3.1 Sendmail Consortium Sendmail 8.12.1 HP MPE/iX 7.5 HP MPE/iX 7.0 MandrakeSoft Linux Mandrake 8.2 ppc MandrakeSoft Linux Mandrake 8.2 Sendmail Consortium Sendmail 8.12 beta7 Sendmail Consortium Sendmail 8.12 beta5 Sendmail Consortium Sendmail 8.12 beta16 Sendmail Consortium Sendmail 8.12 beta12 Sendmail Consortium Sendmail 8.12 beta10 Sendmail Consortium Sendmail 8.12 .10 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux current Sendmail Consortium Sendmail 8.12 .0 Sendmail Consortium Sendmail 8.11.7 Sendmail Consortium Sendmail 8.11.6 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Workstation 3.1 Conectiva Linux 8.0 Conectiva Linux 7.0 Conectiva Linux 6.0 FreeBSD FreeBSD 4.5 RELEASE FreeBSD FreeBSD 4.5 FreeBSD FreeBSD 4.4 Immunix Immunix OS 7.0 MandrakeSoft Linux Mandrake 8.1 ia64 MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.0 RedHat Linux 7.3 i386 RedHat Linux 7.2 ia64 RedHat Linux 7.2 i386 RedHat Linux 7.1 i386 RedHat Linux 7.0 i386 RedHat Linux 6.2 i386 S.u.S.E. Linux 7.3 sparc S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 i386 S.u.S.E. Linux 7.3 Sun Cobalt RaQ 550 Sun Linux 5.0.3 Sun Linux 5.0 Sendmail Consortium Sendmail 8.11.5 Sendmail Consortium Sendmail 8.11.4 Conectiva Linux 7.0 Slackware Linux 8.0 Sendmail Consortium Sendmail 8.11.3 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 8.0 S.u.S.E. Linux 7.2 i386 S.u.S.E. Linux 7.2 Slackware Linux 7.1 Sendmail Consortium Sendmail 8.11.2 RedHat Linux 7.1 ia64 RedHat Linux 7.1 i386 RedHat Linux 7.1 alpha RedHat Linux 7.1 S.u.S.E. Linux 7.1 x86 S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 Sendmail Consortium Sendmail 8.11.1 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1 Conectiva Linux 6.0 Sendmail Consortium Sendmail 8.11 Compaq Tru64 5.1 b Compaq Tru64 5.1 a Compaq Tru64 5.1 IBM AIX 5.2 IBM AIX 5.1 MandrakeSoft Linux Mandrake 7.2 RedHat Linux 7.0 sparc RedHat Linux 7.0 i386 RedHat Linux 7.0 alpha RedHat Linux 7.0 S.u.S.E. Linux 7.0 sparc S.u.S.E. Linux 7.0 ppc S.u.S.E. Linux 7.0 alpha S.u.S.E. Linux 7.0 SCO Open Server 5.0.6 a SCO Open Server 5.0.6 SCO Open Server 5.0.5 SCO Open Server 5.0.4 Sendmail Consortium Sendmail 8.10.2 Sun Cobalt Qube3 4000WG Sun Cobalt RaQ 4 Sun Cobalt RaQ XTR Sun Cobalt RaQ XTR 3500R Sun Cobalt RaQ4 3001R Sendmail Consortium Sendmail 8.10.1 Sendmail Consortium Sendmail 8.10 Sendmail Consortium Sendmail 8.9.3 Compaq Tru64 5.1 PK5 (BL19) Compaq Tru64 5.0 a PK3 (BL17) Debian Linux 2.2 sparc Debian Linux 2.2 powerpc Debian Linux 2.2 IA32 Debian Linux 2.2 arm Debian Linux 2.2 alpha Debian Linux 2.2 68k Debian Linux 2.2 IBM AIX 4.3.3 SGI IRIX 6.5.19 SGI IRIX 6.5.18 m SGI IRIX 6.5.18 f SGI IRIX 6.5.17 m SGI IRIX 6.5.17 f SGI IRIX 6.5.16 m SGI IRIX 6.5.16 f SGI IRIX 6.5.15 m SGI IRIX 6.5.15 f SGI IRIX 6.5.14 m SGI IRIX 6.5.14 f SGI IRIX 6.5.13 m SGI IRIX 6.5.13 f SGI IRIX 6.5.12 m SGI IRIX 6.5.12 f SGI IRIX 6.5.11 m SGI IRIX 6.5.11 f SGI IRIX 6.5.10 m SGI IRIX 6.5.10 f SGI IRIX 6.5.9 m SGI IRIX 6.5.9 f SGI IRIX 6.5.8 m SGI IRIX 6.5.8 f SGI IRIX 6.5.7 m SGI IRIX 6.5.7 f Sendmail Consortium Sendmail 8.9.2 Sendmail Consortium Sendmail 8.9.1 Sendmail Consortium Sendmail 8.9 .0 Sendmail Consortium Sendmail 8.8.8 Compaq Tru64 4.0 g PK3 (BL17) Compaq Tru64 4.0 f PK7 (BL18) SGI IRIX 6.5.6 SGI IRIX 6.5.5 SGI IRIX 6.5.4 SGI IRIX 6.5.3 SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5 Sendmail Consortium Sendmail 5.65 Sendmail Consortium Sendmail 5.61 Sendmail Consortium Sendmail 5.59 Sendmail Consortium Sendmail 4.55 Sendmail Consortium Sendmail 4.1 OpenBSD OpenBSD 3.9 OpenBSD OpenBSD 3.8
Not Vulnerable
Code	An attacker may trigger this issue by constructing a malicious email message and sending it to a vulnerable server.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities