Bug 184466 - CVE-2006-0058 Sendmail race condition issue
CVE-2006-0058 Sendmail race condition issue
Product: Fedora
Classification: Fedora
Component: sendmail (Show other bugs)
All Linux
medium Severity urgent
: ---
: ---
Assigned To: Thomas Woerner
David Lawrence
: Security
Depends On:
  Show dependency treegraph
Reported: 2006-03-08 18:10 EST by Josh Bressers
Modified: 2013-01-09 22:41 EST (History)
3 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2006-03-22 14:17:49 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Josh Bressers 2006-03-08 18:10:10 EST
Sendmail race condition issue

CERT has reported a race condition issue in sendmail which may lead to
arbitrary remote code execution.

CERT has assinged this issue the name VU#834865
Comment 1 Josh Bressers 2006-03-08 18:18:15 EST
attachment 125842 [details] is the proposed patch from CERT

To quote CERT regarding this patch:

    A patch to correct this issue in sendmail versions 8.13 is provided
    below. The patch also eliminates potential integer overflows in how
    sendmail handles message headers. This patch was prepared manually by
    Sendmail and in our experience will generate warnings about
    offsets. We've discussed this with Sendmail and believe it to be
    harmless. Aside from that, CERT/CC has not verified this patch, what
    issues are corrected, and how those issues are corrected.
Comment 2 Josh Bressers 2006-03-22 10:58:02 EST
This issue is now public:
Comment 3 Matthew Miller 2006-03-22 13:51:39 EST
This also affects FC5....
Comment 4 Fedora Update System 2006-03-22 13:54:39 EST
sendmail-8.13.6-0.FC4.1 has been pushed for FC4, which should resolve this issue.  If these problems are still present in this version, then please make note of it in this bug report.
Comment 5 Matthew Miller 2006-03-22 13:59:14 EST
So what about FC5?
Comment 6 Josh Bressers 2006-03-22 14:17:49 EST
FC5 is being fixed by sendmail-8.13.6-0.FC5.1

The FC5 update has been pushed, it should appear on mirrors shortly.
Comment 7 Matthew Miller 2006-03-22 14:37:47 EST

Note You need to log in before you can comment on or make changes to this bug.