CVE-2006-0058
Fixed in a distro release EPSS 29%
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.
Products: sendmail
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sendmail | 8.13.6-1 |
| Debian 13 | sendmail | 8.13.6-1 |
| Debian 14 | sendmail | 8.13.6-1 |
| Debian 3.0 | sendmail | 8.12.3-7.2 |
| Debian 3.1 | sendmail | 8.13.4-3sarge1 |
| Red Hat Enterprise Linux 3 | sendmail | 0:8.12.11-4.RHEL3.4 |
| Red Hat Enterprise Linux 3 | sendmail-cf | 0:8.12.11-4.RHEL3.4 |
| Red Hat Enterprise Linux 3 | sendmail-debuginfo | 0:8.12.11-4.RHEL3.4 |
| Red Hat Enterprise Linux 3 | sendmail-devel | 0:8.12.11-4.RHEL3.4 |
| Red Hat Enterprise Linux 3 | sendmail-doc | 0:8.12.11-4.RHEL3.4 |
| Red Hat Enterprise Linux 4 | sendmail | 0:8.13.1-3.RHEL4.3 |
| Red Hat Enterprise Linux 4 | sendmail-cf | 0:8.13.1-3.RHEL4.3 |
| Red Hat Enterprise Linux 4 | sendmail-debuginfo | 0:8.13.1-3.RHEL4.3 |
| Red Hat Enterprise Linux 4 | sendmail-devel | 0:8.13.1-3.RHEL4.3 |
| Red Hat Enterprise Linux 4 | sendmail-doc | 0:8.13.1-3.RHEL4.3 |