Every CVESearch/Get API key

CVE-2009-4565

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of...

7.5 HighFix available

CVE-2009-4565 is a high vulnerability (CVSS 7.5) in Sendmail, published January 4, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.40%, the 84th percentile. Fixed in sendmail 8.14.3-9.1.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
2.40%EPSS, 84th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
8.14.3-9.1sendmail +36 more

Description

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Exploit likelihood

2.40%Down 2.0 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sendmail
Debian:12
before 8.14.3-9.1
8.14.3-9.1
sendmail
Debian:13
before 8.14.3-9.1
8.14.3-9.1
sendmail
Debian:14
before 8.14.3-9.1
8.14.3-9.1
sendmail
Debian:4.0
before 8.13.8-3+etch1, plus listed versions
8.13.8-3
8.13.8-3+etch1
sendmail
Debian:5.0
before 8.14.3-5+lenny1, plus listed versions
8.14.3-5
8.14.3-5+lenny1
sendmail
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-cf
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
Show 27 moreShow less
Affected packages
PackageAffectedFixed
sendmail-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-doc
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-cf
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail-doc
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:8.13.8-8.el5
0:8.13.8-8.el5
sendmail
Red Hat:enterprise_linux:4::as
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-cf
Red Hat:enterprise_linux:4::as
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-debuginfo
Red Hat:enterprise_linux:4::as
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-devel
Red Hat:enterprise_linux:4::as
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-doc
Red Hat:enterprise_linux:4::as
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail
Red Hat:enterprise_linux:4::desktop
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-cf
Red Hat:enterprise_linux:4::desktop
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-devel
Red Hat:enterprise_linux:4::desktop
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-doc
Red Hat:enterprise_linux:4::desktop
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail
Red Hat:enterprise_linux:4::es
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-cf
Red Hat:enterprise_linux:4::es
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-debuginfo
Red Hat:enterprise_linux:4::es
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-devel
Red Hat:enterprise_linux:4::es
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-doc
Red Hat:enterprise_linux:4::es
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail
Red Hat:enterprise_linux:4::ws
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-cf
Red Hat:enterprise_linux:4::ws
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-devel
Red Hat:enterprise_linux:4::ws
before 0:8.13.1-6.el4
0:8.13.1-6.el4
sendmail-doc
Red Hat:enterprise_linux:4::ws
before 0:8.13.1-6.el4
0:8.13.1-6.el4

What each source reports

NVD Score used7.5

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Record
CVE-2009-4565
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-310
Updated
2026-11-02
CVE ListNo score

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Record
CVE-2009-4565
Updated
2026-11-02
EUVDEUVD-2009-4531No score

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Record
EUVD-2009-4531
Updated
2026-11-03
GitHub AdvisoriesGHSA-g4p5-56vp-vcg5No score

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of...

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Record
GHSA-g4p5-56vp-vcg5
Updated
2026-11-02
OSVNo score

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Record
CVE-2009-4565
Updated
2026-11-02
OSVDEBIAN-CVE-2009-4565No score

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Record
DEBIAN-CVE-2009-4565
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 36 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open