CVE-2006-0058
NoneCVSS
—
EPSS
28.7%
Published
Mar 22, 2006
CISA due date
—
The record
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | sendmail | 0 | 8.13.6-1 |
| Debian:11 | sendmail | 0 | 8.13.6-1 |
| Debian:12 | sendmail | 0 | 8.13.6-1 |
| Debian:13 | sendmail | 0 | 8.13.6-1 |
| Debian:3.0 | sendmail | 0 | 8.12.3-7.2 |
| Debian:3.1 | sendmail | 0 | 8.13.4-3sarge1 |
| Red Hat:enterprise_linux:3::as | sendmail | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::as | sendmail-cf | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::as | sendmail-debuginfo | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::as | sendmail-devel | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::as | sendmail-doc | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::desktop | sendmail | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::desktop | sendmail-cf | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::desktop | sendmail-debuginfo | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::desktop | sendmail-devel | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::desktop | sendmail-doc | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::es | sendmail | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::es | sendmail-cf | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::es | sendmail-debuginfo | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::es | sendmail-devel | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::es | sendmail-doc | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::ws | sendmail | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::ws | sendmail-cf | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::ws | sendmail-debuginfo | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::ws | sendmail-devel | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:3::ws | sendmail-doc | 0 | 0:8.12.11-4.RHEL3.4 |
| Red Hat:enterprise_linux:4::as | sendmail | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::as | sendmail-cf | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::as | sendmail-debuginfo | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::as | sendmail-devel | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::as | sendmail-doc | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::desktop | sendmail | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::desktop | sendmail-cf | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::desktop | sendmail-debuginfo | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::desktop | sendmail-devel | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::desktop | sendmail-doc | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::es | sendmail | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::es | sendmail-cf | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::es | sendmail-debuginfo | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::es | sendmail-devel | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::es | sendmail-doc | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::ws | sendmail | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::ws | sendmail-cf | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::ws | sendmail-debuginfo | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::ws | sendmail-devel | 0 | 0:8.13.1-3.RHEL4.3 |
| Red Hat:enterprise_linux:4::ws | sendmail-doc | 0 | 0:8.13.1-3.RHEL4.3 |
Related vulnerabilities
- CVE-2009-1490 Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a… Also affects sendmail
- CVE-2003-0681 A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the… Also affects sendmail
- CVE-2003-0694 The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code… Also affects sendmail
- CVE-2003-0161 The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does… Also affects sendmail
- CVE-2002-1337 Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary… Also affects sendmail