Sendmail - vulnerabilities (CVEs)

33 CVEs in 10 products, 0 in the last 30 days, newest from 2023-12-24.

Products

Sendmail - 33 CVEs
Sendmail Switch - 3 CVEs
Advanced Message Server - 2 CVEs
Sendmail Pro - 2 CVEs
Intelligent Quarantine - 0 CVEs
Managed Mta - 0 CVEs
Message Store Sams - 0 CVEs
Multi Switch - 0 CVEs
Sendmail+pro - 0 CVEs
Sentrion - 0 CVEs

Newest CVEs of Sendmail

CVE-2023-51765 - CVSS 5.3 (medium), 2023-12-24: sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages…
CVE-2021-3618 - CVSS 7.4 (high), 2022-03-23: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates,…
CVE-2014-3956 - CVSS 1.9 (low), 2014-06-04: The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags,…
CVE-2009-4565 - CVSS 7.5 (high), 2010-01-04: sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle…
CVE-2009-1490 - CVSS 5 (medium), 2009-05-05: Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code…
CVE-2007-2246 - CVSS 7.8 (high), 2007-04-25: Unspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1; and HP-UX B.11.23 when running sendmail 8.11.1; allows remote…
CVE-2006-7176 - CVSS 4.3 (medium), 2007-03-27: The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail…
CVE-2006-7175 - CVSS 7.5 (high), 2007-03-27: The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not allow the administrator to disable SSLv2 encryption, which could…
CVE-2006-4434 - CVSS 7.5 (high), 2006-08-29: Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header line", which causes a…
CVE-2006-1173 - CVSS 5 (medium), 2006-06-07: Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during…
CVE-2006-0058 - CVSS 7.6 (high), 2006-03-22: Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes…
CVE-2005-2070 - CVSS 5 (medium), 2005-06-29: The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by…
CVE-2003-0688 - CVSS 5 (medium), 2003-10-20: The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote…
CVE-2003-0694 - CVSS 10 (critical), 2003-10-06: The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr…
CVE-2003-0681 - CVSS 7.5 (high), 2003-10-06: A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific…
CVE-2003-0308 - CVSS 7.2 (high), 2003-05-15: The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via…
CVE-2003-0161 - CVSS 10 (critical), 2003-04-02: The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types,…
CVE-2002-1337 - CVSS 10 (critical), 2003-03-07: Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and…
CVE-2002-2261 - CVSS 7.5 (high), 2002-12-31: Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname.
CVE-2002-1827 - CVSS 2.1 (low), 2002-12-31: Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and…
CVE-2002-2423 - CVSS 6.4 (medium), 2002-12-31: Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged…
CVE-2002-1165 - CVSS 4.6 (medium), 2002-10-11: Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to…
CVE-2002-0906 - CVSS 7.5 (high), 2002-10-04: Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service…
CVE-2001-0715 - CVSS 2.1 (low), 2001-10-30: Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by…
CVE-2001-0714 - CVSS 2.1 (low), 2001-10-30: Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (data loss) by (1) setting a high initial…
CVE-2001-0713 - CVSS 4.6 (medium), 2001-10-30: Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain…
CVE-2001-0653 - CVSS 4.6 (medium), 2001-09-20: Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category'…
CVE-2001-1349 - CVSS 3.7 (low), 2001-05-28: Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via…
CVE-1999-1592 - CVSS 7.5 (high), 1999-12-31: Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might…
CVE-1999-1109 - CVSS 5 (medium), 1999-12-22: Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while…