The new Sendmail vulnerability reported and is cause due to an error in the termination of the recursive "mime8to7()" function when performing MIME conversions. It can be exploited to cause a certain sendmail process to crash when it runs out of stack space while processing a deeply nested malformed MIME message. It can be exploited by malicious people to cause a DoS (Denial of Service). You can apply patch or upgrade to 8.13.7 version. Affected Version : 8.13.6 and prior. The additional vulnerability information can be found following sites. http://www.sendmail.org/releases/8.13.7.html |
Kevin 32 Posts Jun 15th 2006 |
Thread locked Subscribe |
Jun 15th 2006 1 decade ago |
Sign Up for Free or Log In to start participating in the conversation!