CVE-2006-7176
Fixed in a distro release EPSS 2%
The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.
Products: sendmail
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 4 | sendmail | 0:8.13.1-3.2.el4 |
| Red Hat Enterprise Linux 4 | sendmail-cf | 0:8.13.1-3.2.el4 |
| Red Hat Enterprise Linux 4 | sendmail-debuginfo | 0:8.13.1-3.2.el4 |
| Red Hat Enterprise Linux 4 | sendmail-devel | 0:8.13.1-3.2.el4 |
| Red Hat Enterprise Linux 4 | sendmail-doc | 0:8.13.1-3.2.el4 |
| Red Hat Enterprise Linux 5 | sendmail | 0:8.13.8-8.el5 |
| Red Hat Enterprise Linux 5 | sendmail-cf | 0:8.13.8-8.el5 |
| Red Hat Enterprise Linux 5 | sendmail-debuginfo | 0:8.13.8-8.el5 |
| Red Hat Enterprise Linux 5 | sendmail-devel | 0:8.13.8-8.el5 |
| Red Hat Enterprise Linux 5 | sendmail-doc | 0:8.13.8-8.el5 |