This script is Copyright (C) 2004-2015 Tenable Network Security, Inc.
The remote Mandrake Linux host is missing one or more security
A buffer overflow vulnerability was discovered in the address parsing
code in all versions of sendmail prior to 8.12.10 by Michal Zalewski,
with a patch to fix the problem provided by Todd C. Miller. This
vulnerability seems to be remotely exploitable on Linux systems
running on the x86 platform; the sendmail team is unsure of other
Another potential buffer overflow was fixed in ruleset parsing which
is not exploitable in the default sendmail configuration. A problem
may occur if non-standard rulesets recipient (2), final (4), or
mailer- specific envelope recipients rulesets are use. This problem
was discovered by Timo Sirainen (CVE-2003-0681).
MandrakeSoft encourages all users who use sendmail to upgrade to the
provided packages which are patched to fix both problems.
See also :
Update the affected packages.
Risk factor :
Critical / CVSS Base Score : 10.0