Skip to content

Sendmail vulnerabilities

Products

Newest

sendmail, freebsd, redhat enterprise linux +2 more sendmail through at least 8.14.7 allows SMTP smuggling in certain configurations. Remote... CVE-2023-51765 Fix available 5.3 MediumDecember 24, 2023
debian linux, f5 nginx, fedoraproject fedora +2 more +4 more ALPACA is an application layer protocol content confusion attack, exploiting TLS servers... CVE-2021-3618 Fix available 7.4 HighDecember 8, 2021
sendmail, fedoraproject fedora, freebsd +1 more +3 more The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong... CVE-2014-3956 Fix available 1.9 LowJune 4, 2014
sendmail sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of... CVE-2009-4565 Fix available 7.5 HighJanuary 4, 2010
sendmail Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of... CVE-2009-1490 Public exploitFix available EPSS 12.6% 5.0 MediumMay 5, 2009
sendmail Unspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1;... CVE-2007-2246 7.8 HighApril 25, 2007
sendmail The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not... CVE-2006-7176 Fix available 4.3 MediumMarch 27, 2007
sendmail The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not... CVE-2006-7175 7.5 HighMarch 27, 2007
sendmail Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial... CVE-2006-4434 Fix available 7.5 HighAugust 29, 2006
sendmail Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested,... CVE-2006-1173 Fix available 5.0 MediumJune 7, 2006
sendmail Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute... CVE-2006-0058 Public exploitFix available EPSS 28.7% 7.6 HighMarch 22, 2006
sendmail The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long... CVE-2005-2070 Fix available 5.0 MediumJune 29, 2005
sendmail, apple mac os x, mac os x server +15 more +17 more The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via... CVE-2003-0694 Fix available EPSS 66.2% 10.0 HighSeptember 17, 2003
sendmail, apple mac os x, mac os x server +11 more +13 more A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard... CVE-2003-0681 Public exploitFix available EPSS 22.4% 7.5 HighSeptember 17, 2003
redhat sendmail, compaq tru64, freebsd +2 more +4 more The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not... CVE-2003-0688 Fix available 5.0 MediumSeptember 3, 2003
debian linux, sendmail +1 more The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files,... CVE-2003-0308 Fix available 7.2 HighMay 15, 2003
sendmail, compaq tru64, hp hp-ux +6 more +8 more The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not... CVE-2003-0161 Public exploitFix available EPSS 38.8% 10.0 HighApril 1, 2003
sendmail, gentoo linux, hp alphaserver sc +6 more +8 more Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via... CVE-2002-1337 Public exploitFix available EPSS 72.6% 10.0 HighMarch 4, 2003
sendmail Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows... CVE-2002-2423 6.4 MediumDecember 31, 2002
sendmail Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by... CVE-2002-2261 Fix available 7.5 HighDecember 31, 2002
sendmail Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an... CVE-2002-1827 Public exploitFix available 2.1 LowDecember 31, 2002
sendmail Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT... CVE-2002-0906 Fix available 7.5 HighOctober 4, 2002
sendmail, netbsd +1 more Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other... CVE-2002-1165 Public exploitFix available 4.6 MediumOctober 3, 2002
sendmail Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain... CVE-2001-0715 2.1 LowOctober 12, 2001
sendmail Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause... CVE-2001-0714 2.1 LowOctober 12, 2001
sendmail Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load... CVE-2001-0713 4.6 MediumOctober 12, 2001
sendmail Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and... CVE-2001-0653 Public exploit 4.6 MediumSeptember 20, 2001
sendmail Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of... CVE-2001-1349 3.7 LowMay 28, 2001
sendmail Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4,... CVE-1999-1592 7.5 HighDecember 31, 1999
sendmail Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series... CVE-1999-1109 Public exploit 5.0 MediumDecember 22, 1999
sendmail Denial of service in HP-UX sendmail 8.8.6 related to accepting connections. CVE-1999-0478 5.0 MediumDecember 1, 1998
sendmail Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d)... CVE-1999-1309 7.2 HighAugust 30, 1996
sendmail, sun sunos +1 more SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows... CVE-1999-1580 7.2 HighAugust 23, 1995