high7.6Public exploit code
CVE-2006-0058
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sendmail 8.13.5 - Remote Signal Handling (PoC)2006-07-21 · dos · linux · Verified
Impact
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sendmail | Sendmail | Versions 8.13.0, 8.13.1, 8.13.2, 8.13.3, 8.13.4, 8.13.5 |
References
- NVD record
- CVE.org record
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635
- http://secunia.com/advisories/19342
- http://secunia.com/advisories/19345
- http://secunia.com/advisories/19346
- http://secunia.com/advisories/19349
- http://secunia.com/advisories/19356
- http://secunia.com/advisories/19360
- http://secunia.com/advisories/19361
- http://secunia.com/advisories/19363
- http://secunia.com/advisories/19367
- http://secunia.com/advisories/19368
- http://secunia.com/advisories/19394
- http://secunia.com/advisories/19404
- http://secunia.com/advisories/19407
- http://secunia.com/advisories/19450
- http://secunia.com/advisories/19466
- http://secunia.com/advisories/19532
- http://secunia.com/advisories/19533
- http://secunia.com/advisories/19676
- http://secunia.com/advisories/19774
- http://secunia.com/advisories/20243
- http://secunia.com/advisories/20723
- http://securityreason.com/securityalert/612
- http://securityreason.com/securityalert/743