Sendmail Remote Signal Handling Vulnerability
A serious flaw has been found in Sendmail that could allow an attacker to take control of the SMTP server running vulnerable version of the software. A remote attacker could send malicious data at certain time intervals, which can corrupt arbitrary stack memory and gain control of the Server.
This security hole affects all Linux and Unix versions of Sendmail 8 up to version 8.13.5. Microsoft Windows versions of Sendmail are not affected. Sendmail has released a new verion 8.13.6 to fix this problem and also patches for earlier versions are available at their FTP site.
Recent Comments