Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of service that is possible here is to fill up the disk with core dumps if the OS actually generates different core dumps (which is unlikely)... the bug is in the shutdown code (finis()) which leads directly to exit(3), i.e., the process would terminate anyway, no mail delivery or receiption is affected."

SunOS 5.10_x86: sendmail patch.
Date this patch was last updated by Sun : Jan/29/07

SunOS 5.10: sendmail patch.
Date this patch was last updated by Sun : Jan/29/07

The remote mail server is running a version of Sendmail earlier than 8.13.8. Such versions are reportedly affected by a use-after-free flaw that may allow an attacker to crash the server.

Without this update sendmail may crash when finishing a mail due to referencing an already freed variable. (CVE-2006-4434)

Without this update sendmail may crash when finishing a mail due to referencing an already freed variable (CVE-2006-4434).

Moritz Jodeit discovered a vulnerability in sendmail when processing very long header lines that could be exploited to cause a Denial of Service by crashing sendmail.

The updated packages have been patched to correct this issue.

A programming error has been discovered in sendmail, an alternative mail transport agent for Debian, that could allow a remote attacker to crash the sendmail process by sending a specially crafted email message.

Please note that in order to install this update you also need libsasl2 library from proposed updates as outlined in DSA 1155-2.

SunOS 5.9_x86: sendmail Patch.
Date this patch was last updated by Sun : Mar/04/08

SunOS 5.9: sendmail patch.
Date this patch was last updated by Sun : Feb/05/08

ID	Name	Product	Family	Severity
107916	Solaris 10 (x86) : 125012-01	Nessus	Solaris Local Security Checks	medium
107413	Solaris 10 (sparc) : 125011-01	Nessus	Solaris Local Security Checks	medium
17724	Sendmail < 8.13.8 Header Processing Overflow DoS	Nessus	SMTP problems	medium
41098	SuSE9 Security Update : sendmail (YOU Patch Number 11200)	Nessus	SuSE Local Security Checks	medium
29579	SuSE 10 Security Update : sendmail (ZYPP Patch Number 2030)	Nessus	SuSE Local Security Checks	medium
27446	openSUSE 10 Security Update : sendmail (sendmail-2027)	Nessus	SuSE Local Security Checks	medium
24392	Solaris 10 (x86) : 125012-01	Nessus	Solaris Local Security Checks	medium
24380	Solaris 10 (sparc) : 125011-01	Nessus	Solaris Local Security Checks	medium
23900	Mandrake Linux Security Advisory : sendmail (MDKSA-2006:156)	Nessus	Mandriva Local Security Checks	medium
22706	Debian DSA-1164-1 : sendmail - programming error	Nessus	Debian Local Security Checks	medium
13592	Solaris 9 (x86) : 114137-10	Nessus	Solaris Local Security Checks	high
13541	Solaris 9 (sparc) : 113575-11	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2006-4434

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high