Every CVE Search/ Get API key

CVE-2006-1173

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested,...

5.0 MediumFix available

CVE-2006-1173 is a medium vulnerability (CVSS 5.0) in Sendmail, published June 7, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.27%, the 92nd percentile. Fixed in sendmail 8.13.7-1.

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.

Exploit likelihood

5.27%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.

Record
CVE-2006-1173
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.

Record
CVE-2006-1173
Updated
2026-11-02
EUVDEUVD-2006-1177 No score

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.

Record
EUVD-2006-1177
Updated
2026-11-03
GitHub AdvisoriesGHSA-2rh9-mcg8-96mq No score

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested,...

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.

Record
GHSA-2rh9-mcg8-96mq
Updated
2026-11-02
OSV No score

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.

Record
CVE-2006-1173
Updated
2026-11-02
OSVDEBIAN-CVE-2006-1173 No score

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.

Record
DEBIAN-CVE-2006-1173
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sendmail
Debian:12
 before 8.13.7-1
8.13.7-1
sendmail
Debian:13
 before 8.13.7-1
8.13.7-1
sendmail
Debian:14
 before 8.13.7-1
8.13.7-1
sendmail
Debian:3.1
 before 8.13.4-3sarge2, plus listed versions
8.13.4-38.13.4-3sarge1
8.13.4-3sarge2
sendmail
Red Hat:enterprise_linux:3::as
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-cf
Red Hat:enterprise_linux:3::as
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-devel
Red Hat:enterprise_linux:3::as
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-doc
Red Hat:enterprise_linux:3::as
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail
Red Hat:enterprise_linux:3::desktop
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
Show 34 moreShow less
Affected packages
PackageAffectedFixed
sendmail-cf
Red Hat:enterprise_linux:3::desktop
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-devel
Red Hat:enterprise_linux:3::desktop
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-doc
Red Hat:enterprise_linux:3::desktop
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail
Red Hat:enterprise_linux:3::es
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-cf
Red Hat:enterprise_linux:3::es
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-devel
Red Hat:enterprise_linux:3::es
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-doc
Red Hat:enterprise_linux:3::es
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail
Red Hat:enterprise_linux:3::ws
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-cf
Red Hat:enterprise_linux:3::ws
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-devel
Red Hat:enterprise_linux:3::ws
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail-doc
Red Hat:enterprise_linux:3::ws
 before 0:8.12.11-4.RHEL3.6
0:8.12.11-4.RHEL3.6
sendmail
Red Hat:enterprise_linux:4::as
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-cf
Red Hat:enterprise_linux:4::as
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-devel
Red Hat:enterprise_linux:4::as
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-doc
Red Hat:enterprise_linux:4::as
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail
Red Hat:enterprise_linux:4::desktop
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-cf
Red Hat:enterprise_linux:4::desktop
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-devel
Red Hat:enterprise_linux:4::desktop
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-doc
Red Hat:enterprise_linux:4::desktop
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail
Red Hat:enterprise_linux:4::es
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-cf
Red Hat:enterprise_linux:4::es
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-devel
Red Hat:enterprise_linux:4::es
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-doc
Red Hat:enterprise_linux:4::es
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail
Red Hat:enterprise_linux:4::ws
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-cf
Red Hat:enterprise_linux:4::ws
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-devel
Red Hat:enterprise_linux:4::ws
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5
sendmail-doc
Red Hat:enterprise_linux:4::ws
 before 0:8.13.1-3.RHEL4.5
0:8.13.1-3.RHEL4.5

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 56 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open