exploits , vulnerabilities , articles , Sendmail DNS Map TXT Record Buffer Overflow Vulnerability

Title	Sendmail DNS Map TXT Record Buffer Overflow Vulnerability
Published	2002-06-28-12:00AM
Updated	2004-12-13-07:36PM
Class	Boundary Condition Error
CVE	CVE-2002-0906
Remote	Yes
Local	No
Credit	Vulnerability discovered independently by Joost Pol of PINE Internet and Anton Rang of Sun Microsystems.
Vulnerable	Sun Solaris 9.0 Sendmail Consortium Sendmail 8.12.4 OpenBSD OpenBSD 3.2 Slackware Linux current Slackware Linux 8.1 Sendmail Consortium Sendmail 8.12.3 Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc FreeBSD FreeBSD 4.6 S.u.S.E. Linux 8.0 S.u.S.E. Linux 8.0 i386 Sendmail Consortium Sendmail 8.12.2 Apple Mac OS X 10.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.3 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.3 OpenBSD OpenBSD 3.1 Sendmail Consortium Sendmail 8.12.1 HP MPE/iX 7.0 HP MPE/iX 7.5 MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.2 ppc Sendmail Consortium Sendmail 8.12 .0 Sendmail Consortium Sendmail 8.11.6 Caldera OpenLinux Server 3.1 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1 Caldera OpenLinux Workstation 3.1.1 Conectiva Linux 6.0 Conectiva Linux 7.0 Conectiva Linux 8.0 FreeBSD FreeBSD 4.4 FreeBSD FreeBSD 4.5 FreeBSD FreeBSD 4.5 RELEASE Immunix Immunix OS 7.0 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 RedHat Linux 6.2 i386 RedHat Linux 7.0 i386 RedHat Linux 7.1 i386 RedHat Linux 7.2 i386 RedHat Linux 7.2 ia64 RedHat Linux 7.3 i386 S.u.S.E. Linux 7.3 S.u.S.E. Linux 7.3 i386 S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 sparc Sun Cobalt RaQ 550 Sun Linux 5.0 Sun Linux 5.0.3 Sendmail Consortium Sendmail 8.11.5 Sendmail Consortium Sendmail 8.11.4 Conectiva Linux 7.0 Slackware Linux 8.0 Sendmail Consortium Sendmail 8.11.3 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 8.0 S.u.S.E. Linux 7.2 S.u.S.E. Linux 7.2 i386 Slackware Linux 7.1 Sendmail Consortium Sendmail 8.11.2 RedHat Linux 7.1 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.1 ia64 S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 x86 Sendmail Consortium Sendmail 8.11.1 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1 Conectiva Linux 6.0 Sendmail Consortium Sendmail 8.11 Compaq Tru64 5.1 Compaq Tru64 5.1 a Compaq Tru64 5.1 b IBM AIX 5.1 IBM AIX 5.2 MandrakeSoft Linux Mandrake 7.2 RedHat Linux 7.0 RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.0 sparc S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.0 alpha S.u.S.E. Linux 7.0 ppc S.u.S.E. Linux 7.0 sparc SCO Open Server 5.0.4 SCO Open Server 5.0.5 SCO Open Server 5.0.6 SCO Open Server 5.0.6 a
Not Vulnerable	Sendmail Consortium Sendmail 8.12.5 Conectiva Linux 9.0 OpenBSD OpenBSD 3.2
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-04 Rae Media Web Based Contact Management Login SQL Injection Vulnerability
2008-12-04 Nagios External Commands and Adaptive Commands Unspecified Vulnerability
2008-12-04 Z1Exchange SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 mvnForum Cross Site Scripting Vulnerability
2008-12-04 i-Net Solution Orkut Clone SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
2008-12-04 Jbook SQL Injection Vulnerability
2008-12-04 SquirrelMail Malformed HTML Mail Message HTML Injection Vulnerability
2008-12-04 HP-UX Unspecified Local Denial Of Service Vulnerability
2008-12-04 Netrw Vim Script Information Disclosure Vulnerability