Vulnerability in Sendmail
CVE-2006-0058
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.
EPSS: 0.281 (97.9th percentile) — read the EPSS interpretation.
Affected products
- Sendmail — versions 8.13.0, 8.13.1, 8.13.2
- N/a — versions n/a
References
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (x_refsource_HP, vendor-advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (vendor-advisory, x_refsource_DEBIAN)
- cret@cert.org (vendor-advisory, x_refsource_MANDRIVA)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (vendor-advisory, x_refsource_OPENBSD)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)