CVE-2006-1173
- State
- Published
- Severity
- Not scored
- Published
- Jun 7, 2006
- Updated
- Aug 7, 2024
- Reserved
- Mar 12, 2006
Description
Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- IY85415vendor-advisory
- HPSBTU02116vendor-advisory
- DSA-1155vendor-advisory
- [3.8] 008: SECURITY FIX: June 15, 2006vendor-advisory
- 20684third-party-advisory
- HPSBUX02124vendor-advisory
- ADV-2006-2388vdb-entry
- 20726third-party-advisory
- oval:org.mitre.oval:def:11253vdb-entrysignature
- ADV-2006-2351vdb-entry
- 21327third-party-advisory
- RHSA-2006:0515vendor-advisory
- ADV-2006-2389vdb-entry
- 21647third-party-advisory
- http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-18.html
- https://issues.rpath.com/browse/RPL-526
- 20651third-party-advisory
- 20683third-party-advisory
- 20650third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-148.htm
- 20782third-party-advisory
- ADV-2006-3135vdb-entry
- 1016295vdb-entry
- 20694third-party-advisory
- 20473third-party-advisory
- ADV-2006-2189vdb-entry
- 20060721 rPSA-2006-0134-1 sendmail sendmail-cfmailing-list
- ADV-2006-2798vdb-entry
- 102460vendor-advisory
- http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc
- MDKSA-2006:104vendor-advisory
- sendmail-multipart-mime-dos(27128)vdb-entry
- 20673third-party-advisory
- http://www.f-secure.com/security/fsc-2006-5.shtml
- 20060621 Re: Sendmail MIME DoS vulnerabilitymailing-list
- 21612third-party-advisory
- 20654third-party-advisory
- ADV-2006-2390vdb-entry
- SSA:2006-166-01vendor-advisory
- GLSA-200606-19vendor-advisory
- 18433vdb-entry
- 20675third-party-advisory
- SUSE-SA:2006:032vendor-advisory
- 20060620 Sendmail MIME DoS vulnerabilitymailing-list
- VU#146718third-party-advisory
- 15779third-party-advisory
- 20641third-party-advisory
- 20679third-party-advisory
- 26197vdb-entry
- 21042third-party-advisory
- 21160third-party-advisory
- IY85930vendor-advisory
- 20060624 Re: Sendmail MIME DoS vulnerabilitymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.