Every CVE Search/ Get API key

CVE-2006-7176

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not...

4.3 MediumFix available

CVE-2006-7176 is a medium vulnerability (CVSS 4.3) in Sendmail, published March 27, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.07%, the 81st percentile. Fixed in sendmail 0:8.13.1-3.2.el4.

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.

Exploit likelihood

2.07%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.

Record
CVE-2006-7176
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.

Record
CVE-2006-7176
Updated
2026-11-02
EUVDEUVD-2006-7158 No score

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.

Record
EUVD-2006-7158
Updated
2026-11-03
GitHub AdvisoriesGHSA-r38f-v7c5-grvh No score

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not...

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.

Record
GHSA-r38f-v7c5-grvh
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sendmail
Red Hat:enterprise_linux:4::as
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-cf
Red Hat:enterprise_linux:4::as
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-devel
Red Hat:enterprise_linux:4::as
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-doc
Red Hat:enterprise_linux:4::as
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail
Red Hat:enterprise_linux:4::desktop
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-cf
Red Hat:enterprise_linux:4::desktop
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-devel
Red Hat:enterprise_linux:4::desktop
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-doc
Red Hat:enterprise_linux:4::desktop
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
Show 22 moreShow less
Affected packages
PackageAffectedFixed
sendmail
Red Hat:enterprise_linux:4::es
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-cf
Red Hat:enterprise_linux:4::es
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-devel
Red Hat:enterprise_linux:4::es
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-doc
Red Hat:enterprise_linux:4::es
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail
Red Hat:enterprise_linux:4::ws
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-cf
Red Hat:enterprise_linux:4::ws
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-devel
Red Hat:enterprise_linux:4::ws
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail-doc
Red Hat:enterprise_linux:4::ws
 before 0:8.13.1-3.2.el4
0:8.13.1-3.2.el4
sendmail
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail
Red Hat:enterprise_linux:5::client
 before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-cf
Red Hat:enterprise_linux:5::client
 before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-doc
Red Hat:enterprise_linux:5::client
 before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail
Red Hat:enterprise_linux:5::server
 before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-cf
Red Hat:enterprise_linux:5::server
 before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-devel
Red Hat:enterprise_linux:5::server
 before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-doc
Red Hat:enterprise_linux:5::server
 before 0:8.13.8-8.el5
0:8.13.8-8.el5

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 30 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open