sendmail

19 results · Feed

• Unscored —
  CVE-2023-51765

  sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitat…

  sendmail sendmail Debian Ubuntu
  Dec 24, 2023
• Unscored —
  CVE-2021-3618

  ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protoco…

  nginx nginx nginx sendmail Debian Ubuntu Alpine
  Mar 23, 2022
• Unscored —
  CVE-2014-3956

  The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently sk…

  sendmail sendmail Debian Ubuntu
  Jun 4, 2014
• Unscored —
  CVE-2009-4565

  sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, w…

  sendmail Debian
  Jan 4, 2010
• Unscored —
  CVE-2009-1490 Public exploit EPSS 13%

  Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash…

  sendmail Debian
  May 5, 2009
• Unscored —
  CVE-2002-2261

  Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' fun…

  sendmail Debian
  Oct 18, 2007
• Unscored —
  CVE-2006-4434

  Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via…

  sendmail Debian
  Aug 29, 2006
• Unscored —
  CVE-2006-1173

  Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME…

  sendmail Debian
  Jun 7, 2006
• Unscored —
  CVE-2006-0058 Public exploit EPSS 29%

  Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by tri…

  sendmail Debian
  Mar 22, 2006
• Unscored —
  CVE-2002-1827 Public exploit

  Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1)…

  sendmail Debian
  Jun 28, 2005
• Unscored —
  CVE-2004-0833

  Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a f…

  sendmail Debian
  Nov 19, 2004
• Unscored —
  CVE-2002-1337 Public exploit EPSS 73%

  Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted addr…

  sendmail Debian
  Sep 1, 2004
• Unscored —
  CVE-2003-0681 Public exploit EPSS 22%

  A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient…

  sendmail Debian
  Sep 18, 2003
• Unscored —
  CVE-2003-0694 Public exploit EPSS 66%

  The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, …

  sendmail Debian
  Sep 18, 2003
• Unscored —
  CVE-2003-0688

  The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certai…

  sendmail Debian
  Sep 3, 2003
• Unscored —
  CVE-2003-0308

  The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local u…

  sendmail Debian
  May 17, 2003
• Unscored —
  CVE-2002-0906

  Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote …

  sendmail Debian
  Apr 2, 2003
• Unscored —
  CVE-2003-0161 Public exploit EPSS 39%

  The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain c…

  sendmail Debian
  Apr 1, 2003
• Unscored —
  CVE-2002-1165 Public exploit

  Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 fr…

  sendmail Debian
  Oct 3, 2002