Description
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | sendmail | 8.13.6-1 | — |
| Debian 13 | sendmail | 8.13.6-1 | — |
| Debian 12 | sendmail | 8.13.6-1 | — |
| Debian 3.1 | sendmail | 8.13.4-3sarge1 | DSA-1015-1 |
| Debian 3.0 | sendmail | 8.12.3-7.2 | DSA-1015-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | sendmail +3 | 8.13.1-3.RHEL4.3 | RHSA-2006:0264 |
| RHEL 3 | sendmail +3 | 8.12.11-4.RHEL3.4 | RHSA-2006:0264 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Sendmail 8.13.5 - Remote Signal Handling (PoC) EDB-2051 · dos · Jul 21, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- RHSA-2006:0264 Red Hat Security Advisory: sendmail security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1015-1 sendmail - programming error Debian Security (DSA / DLA) · Mar 9, 2026
References
- ADV-2006-1529 vdb-entry
- HPSBTU02116 vendor-advisory
- 19450 third-party-advisory
- DSA-1015 vendor-advisory
- MDKSA-2006:058 vendor-advisory
- http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688
- [3.8] 006: SECURITY FIX: March 25, 2006 vendor-advisory
- VU#834865 third-party-advisory
- 19342 third-party-advisory
- ADV-2006-1049 vdb-entry
- 19774 third-party-advisory
- oval:org.mitre.oval:def:11074 vdb-entry signature
- 200494 vendor-advisory
- 19404 third-party-advisory
- 19367 third-party-advisory
- OpenPKG-SA-2006.007 vendor-advisory
- ADV-2006-1051 vdb-entry
- 20060322 sendmail vuln advisories (CVE-2006-0058) mailing-list
- http://www.f-secure.com/security/fsc-2006-2.shtml
- 743 third-party-advisory
- 1015801 vdb-entry
- HPSBUX02108 vendor-advisory
- 19363 third-party-advisory
- smtp-timeout-bo(24584) vdb-entry
- TA06-081A third-party-advisory
- 20723 third-party-advisory
- 20243 third-party-advisory
- 19407 third-party-advisory
- ADV-2006-2189 vdb-entry
- FEDORA-2006-194 vendor-advisory
- 20060322 Sendmail Remote Signal Handling Vulnerability third-party-advisory
- 19466 third-party-advisory
- 19368 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm
- Q-151 third-party-advisory government-resource
- http://support.avaya.com/elmodocs2/security/ASA-2006-074.htm
- 19345 third-party-advisory
- 612 third-party-advisory
- FEDORA-2006-193 vendor-advisory
- 19346 third-party-advisory
- SSA:2006-081-01 vendor-advisory
- IY82992 vendor-advisory
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751
- GLSA-200603-21 vendor-advisory
- IY82994 vendor-advisory
- IY82993 vendor-advisory
- ADV-2006-1068 vdb-entry
- RHSA-2006:0265 vendor-advisory
- ADV-2006-2490 vdb-entry
- ADV-2006-1072 vdb-entry
- FLSA:186277 vendor-advisory
- 19360 third-party-advisory
- 19532 third-party-advisory
- 102324 vendor-advisory
- 19361 third-party-advisory
- 19676 third-party-advisory
- 19356 third-party-advisory
- SUSE-SA:2006:017 vendor-advisory
- 24037 vdb-entry
- 19349 third-party-advisory