Vulnerability in Sendmail
CVE-2006-1173
Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.
EPSS: 0.052 (91.6th percentile) — read the EPSS interpretation.
Affected products
- Sendmail — versions 8.8.8, 8.9.0, 8.9.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (vendor-advisory, x_refsource_AIXAPAR)
- cret@cert.org (x_refsource_HP, vendor-advisory)
- cret@cert.org (vendor-advisory, x_refsource_DEBIAN)
- cret@cert.org (vendor-advisory, x_refsource_OPENBSD)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (x_refsource_HP, vendor-advisory)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (x_refsource_OVAL, signature, vdb-entry)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)