CVE-2006-1173

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.

References

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:17.sendmail.asc

ftp://patches.sgi.com/support/free/security/advisories/20060601-01-P

ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635

http://lists.suse.com/archive/suse-security-announce/2006-Jun/0006.html

http://secunia.com/advisories/15779

http://secunia.com/advisories/20473

http://secunia.com/advisories/20641

http://secunia.com/advisories/20650

http://secunia.com/advisories/20651

http://secunia.com/advisories/20654

http://secunia.com/advisories/20673

http://secunia.com/advisories/20675

http://secunia.com/advisories/20679

http://secunia.com/advisories/20683

http://secunia.com/advisories/20684

http://secunia.com/advisories/20694

http://secunia.com/advisories/20726

http://secunia.com/advisories/20782

http://secunia.com/advisories/21042

http://secunia.com/advisories/21160

http://secunia.com/advisories/21327

http://secunia.com/advisories/21612

http://secunia.com/advisories/21647

http://securitytracker.com/id?1016295

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.631382

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102460-1

http://support.avaya.com/elmodocs2/security/ASA-2006-148.htm

http://www.debian.org/security/2006/dsa-1155

http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-18.html

http://www.f-secure.com/security/fsc-2006-5.shtml

http://www.gentoo.org/security/en/glsa/glsa-200606-19.xml

http://www.kb.cert.org/vuls/id/146718

http://www.mandriva.com/security/advisories?name=MDKSA-2006:104

http://www.openbsd.org/errata38.html#sendmail2

http://www.osvdb.org/26197

http://www.redhat.com/support/errata/RHSA-2006-0515.html

http://www.securityfocus.com/archive/1/437928/100/0/threaded

http://www.securityfocus.com/archive/1/438241/100/0/threaded

http://www.securityfocus.com/archive/1/438330/100/0/threaded

http://www.securityfocus.com/archive/1/440744/100/0/threaded

http://www.securityfocus.com/archive/1/442939/100/0/threaded

http://www.securityfocus.com/bid/18433

http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc

http://www.vupen.com/english/advisories/2006/2189

http://www.vupen.com/english/advisories/2006/2351

http://www.vupen.com/english/advisories/2006/2388

http://www.vupen.com/english/advisories/2006/2389

http://www.vupen.com/english/advisories/2006/2390

http://www.vupen.com/english/advisories/2006/2798

http://www.vupen.com/english/advisories/2006/3135

http://www-1.ibm.com/support/search.wss?rs=0&q=IY85415&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=IY85930&apar=only

https://exchange.xforce.ibmcloud.com/vulnerabilities/27128

https://issues.rpath.com/browse/RPL-526

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11253

Details

Source: MITRE

Published: 2006-06-07

Updated: 2018-10-18

Type: CWE-399

Risk Information

CVSS v2

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:sendmail:sendmail:8.8.8:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.10:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.11.7:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.7:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.8:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.9:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.10:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.12.11:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.13.0:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.13.1:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.13.1.2:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.13.2:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.13.3:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.13.4:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:8.13.5:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:* versions up to 8.13.6 (inclusive)

Tenable Plugins

View all (19 total)

IDNameProductFamilySeverity
65264AIX 5.3 TL 5 / 5.3 TL 4 : bos.net.tcp.client (U497412)NessusAIX Local Security Checks
medium
65261AIX 5.2 TL 9 / 5.2 TL 8 : bos.net.tcp.client (U477911)NessusAIX Local Security Checks
medium
28637AIX 5.3 TL 4 / 5.3 TL 5 : bos.net.tcp.client (U807468)NessusAIX Local Security Checks
medium
28597AIX 5.2 TL 8 : bos.net.tcp.client (U806039)NessusAIX Local Security Checks
medium
22697Debian DSA-1155-2 : sendmail - programming errorNessusDebian Local Security Checks
medium
22176HP-UX PHNE_34936 : HP-UX Sendmail MIME Remote Denial of Service (DoS) (HPSBUX02124 SSRT061159 rev.2)NessusHP-UX Local Security Checks
medium
22175HP-UX PHNE_34927 : s700_800 11.04 (VVOS) sendmail(1m) 8.9.3 patchNessusHP-UX Local Security Checks
high
22174HP-UX PHNE_34900 : HP-UX Sendmail MIME Remote Denial of Service (DoS) (HPSBUX02124 SSRT061159 rev.2)NessusHP-UX Local Security Checks
medium
22173HP-UX PHNE_34689 : HP-UX Sendmail MIME Remote Denial of Service (DoS) (HPSBUX02124 SSRT061159 rev.2)NessusHP-UX Local Security Checks
medium
21903CentOS 3 / 4 : sendmail (CESA-2006:0515)NessusCentOS Local Security Checks
medium
21721RHEL 2.1 / 3 / 4 : sendmail (RHSA-2006:0515)NessusRed Hat Local Security Checks
medium
21719Mandrake Linux Security Advisory : sendmail (MDKSA-2006:104)NessusMandriva Local Security Checks
medium
21712GLSA-200606-19 : Sendmail: Denial of ServiceNessusGentoo Local Security Checks
medium
21699Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : sendmail (SSA:2006-166-01)NessusSlackware Local Security Checks
medium
3653Sendmail < 8.13.7 Multi-part MIME Message Handling DoSNessus Network MonitorSMTP Servers
medium
21263Solaris 10 (x86) : 122857-04NessusSolaris Local Security Checks
medium
21260Solaris 10 (sparc) : 122856-03NessusSolaris Local Security Checks
high
13592Solaris 9 (x86) : 114137-10NessusSolaris Local Security Checks
high
13541Solaris 9 (sparc) : 113575-11NessusSolaris Local Security Checks
high