Description
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.
References
- 1146 vdb-entry
- 20000424 unsafe fgets() in sendmail's mail.local mailing-list