medium5.0
CVE-2006-1173
Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during …
Impact
Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sendmail | Sendmail | through 8.13.6 Versions 8.8.8, 8.9.0, 8.9.1, 8.9.2, 8.9.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635
- http://lists.suse.com/archive/suse-security-announce/2006-Jun/0006.html
- http://secunia.com/advisories/15779
- http://secunia.com/advisories/20473
- http://secunia.com/advisories/20641
- http://secunia.com/advisories/20650
- http://secunia.com/advisories/20651
- http://secunia.com/advisories/20654
- http://secunia.com/advisories/20673
- http://secunia.com/advisories/20675
- http://secunia.com/advisories/20679
- http://secunia.com/advisories/20683
- http://secunia.com/advisories/20684
- http://secunia.com/advisories/20694
- http://secunia.com/advisories/20726
- http://secunia.com/advisories/20782
- http://secunia.com/advisories/21042
- http://secunia.com/advisories/21160
- http://secunia.com/advisories/21327
- http://secunia.com/advisories/21612
- http://secunia.com/advisories/21647
- http://securitytracker.com/id?1016295
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.631382
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102460-1
- http://support.avaya.com/elmodocs2/security/ASA-2006-148.htm