7.5

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of service that is possible here is to fill up the disk with core dumps if the OS actually generates different core dumps (which is unlikely)... the bug is in the shutdown code (finis()) which leads directly to exit(3), i.e., the process would terminate anyway, no mail delivery or receiption is affected."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sendmail ≫ Sendmail Version < 8.13.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.33% 0.899
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

http://secunia.com/advisories/21749
Vendor Advisory
Broken Link
http://www.novell.com/linux/security/advisories/2006_21_sr.html
Broken Link
http://secunia.com/advisories/21637
Patch
Vendor Advisory
Broken Link
http://secunia.com/advisories/21641
Patch
Vendor Advisory
Broken Link
http://secunia.com/advisories/21696
Vendor Advisory
Broken Link
http://secunia.com/advisories/21700
Vendor Advisory
Broken Link
http://secunia.com/advisories/22369
Vendor Advisory
Broken Link
http://securitytracker.com/id?1016753
Patch
Third Party Advisory
Broken Link
VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102664-1
Broken Link
http://www.attrition.org/pipermail/vim/2006-August/000999.html
Mailing List
http://www.debian.org/security/2006/dsa-1164
Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2006:156
Broken Link
http://www.openbsd.org/errata.html#sendmail3
Release Notes
http://www.openbsd.org/errata38.html#sendmail3
Third Party Advisory
http://www.osvdb.org/28193
Broken Link
http://www.securityfocus.com/bid/19714
Patch
Third Party Advisory
Broken Link
VDB Entry
http://www.sendmail.org/releases/8.13.8.html
Release Notes
http://www.vupen.com/english/advisories/2006/3393
Vendor Advisory
Broken Link
http://www.vupen.com/english/advisories/2006/3994
Vendor Advisory
Broken Link