CVE-2006-1173

2006-06-0723:06:00

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.349

Percentile

97.1%

JSON

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.

OSVersionArchitecturePackageVersionFilename
Debian12allsendmail< 8.13.7-1sendmail_8.13.7-1_all.deb
Debian11allsendmail< 8.13.7-1sendmail_8.13.7-1_all.deb
Debian999allsendmail< 8.13.7-1sendmail_8.13.7-1_all.deb
Debian13allsendmail< 8.13.7-1sendmail_8.13.7-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	sendmail	< 8.13.7-1	sendmail_8.13.7-1_all.deb
Debian	11	all	sendmail	< 8.13.7-1	sendmail_8.13.7-1_all.deb
Debian	999	all	sendmail	< 8.13.7-1	sendmail_8.13.7-1_all.deb
Debian	13	all	sendmail	< 8.13.7-1	sendmail_8.13.7-1_all.deb