sendmail vulnerabilities (Debian)

20 vulnerabilities.

• sendmail Debian sendmail - regression update DLA-3829-2 Fix available No scoreJune 20, 2024
• sendmail Debian sendmail through at least 8.14.7 allows SMTP smuggling in certain configurations. Remote... CVE-2023-51765 Fix available 5.3 MediumDecember 24, 2023
• sendmail Debian ALPACA is an application layer protocol content confusion attack, exploiting TLS servers... CVE-2021-3618 Fix available 7.4 HighDecember 8, 2021
• sendmail Debian The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong... CVE-2014-3956 Fix available 1.9 LowJune 4, 2014
• sendmail Debian sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of... CVE-2009-4565 Fix available 7.5 HighJanuary 4, 2010
• sendmail Debian Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of... CVE-2009-1490 Public exploitFix available EPSS 12.6% 5.0 MediumMay 5, 2009
• sendmail Debian Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial... CVE-2006-4434 Fix available 7.5 HighAugust 29, 2006
• sendmail Debian Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested,... CVE-2006-1173 Fix available 5.0 MediumJune 7, 2006
• sendmail Debian Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute... CVE-2006-0058 Public exploitFix available EPSS 28.7% 7.6 HighMarch 22, 2006
• sendmail Debian Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail... CVE-2004-0833 Fix available 7.5 HighSeptember 27, 2004
• sendmail Debian The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via... CVE-2003-0694 Fix available EPSS 66.2% 10.0 HighSeptember 17, 2003
• sendmail Debian A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard... CVE-2003-0681 Public exploitFix available EPSS 22.4% 7.5 HighSeptember 17, 2003
• sendmail Debian The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not... CVE-2003-0688 Fix available 5.0 MediumSeptember 3, 2003
• sendmail Debian The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files,... CVE-2003-0308 Fix available 7.2 HighMay 15, 2003
• sendmail Debian The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not... CVE-2003-0161 Public exploitFix available EPSS 38.8% 10.0 HighApril 1, 2003
• sendmail Debian Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via... CVE-2002-1337 Public exploitFix available EPSS 72.6% 10.0 HighMarch 4, 2003
• sendmail Debian Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by... CVE-2002-2261 Fix available 7.5 HighDecember 31, 2002
• sendmail Debian Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an... CVE-2002-1827 Public exploitFix available 2.1 LowDecember 31, 2002
• sendmail Debian Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT... CVE-2002-0906 Fix available 7.5 HighOctober 4, 2002
• sendmail Debian Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other... CVE-2002-1165 Public exploitFix available 4.6 MediumOctober 3, 2002