|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
Sendmail contains a flaw that may allow a remote attacker to gain elevated privileges. The issue is due to the sm_syslog() function which allows an attacker to pass crafted data to the setjmp(3) and longjmp(3) function causing memory corruption. This can be used to remotely execute arbitrary code without authentication.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 8.13.6 or higher, as it has been reported to fix this vulnerability. In addition, Sendmail has released a patch for some older versions.
|
|
Products |
|
Sendmail
 |
8.13 |
|
|
|
|
|
|
Credit |
- Mark Dowd - Avert
 avertlabs.com - McAfee Avert(tm) Labs
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
