CVE-2006-0058

Published: Mar 22, 2006Modified: Apr 16, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.

Affected (6)

Products: Sendmail: Sendmail

Sendmail

1 product

Sendmail

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Sendmail Sendmail	Version 8.13.0
Sendmail Sendmail	Version 8.13.1
Sendmail Sendmail	Version 8.13.2
Sendmail Sendmail	Version 8.13.3
Sendmail Sendmail	Version 8.13.4
Sendmail Sendmail	Version 8.13.5

References (148)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.asc (unsafe URL)

Source: cret@cert.org

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-010.txt.asc (unsafe URL)

Source: cret@cert.org

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.24/SCOSA-2006.24.txt (unsafe URL)

Source: cret@cert.org

ftp://patches.sgi.com/support/free/security/advisories/20060302-01-P (unsafe URL)

Source: cret@cert.org

ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U (unsafe URL)

Source: cret@cert.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555

Source: cret@cert.org

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635

Source: cret@cert.org

http://secunia.com/advisories/19342

Source: cret@cert.org

http://secunia.com/advisories/19345

Source: cret@cert.org

http://secunia.com/advisories/19346

Source: cret@cert.org

http://secunia.com/advisories/19349

Source: cret@cert.org

http://secunia.com/advisories/19356

Source: cret@cert.org

http://secunia.com/advisories/19360

Source: cret@cert.org

http://secunia.com/advisories/19361

Source: cret@cert.org

http://secunia.com/advisories/19363

Source: cret@cert.org

http://secunia.com/advisories/19367

Source: cret@cert.org

http://secunia.com/advisories/19368

Source: cret@cert.org

http://secunia.com/advisories/19394

Source: cret@cert.org

http://secunia.com/advisories/19404

Source: cret@cert.org

http://secunia.com/advisories/19407

Source: cret@cert.org

http://secunia.com/advisories/19450

Source: cret@cert.org

http://secunia.com/advisories/19466

Source: cret@cert.org

http://secunia.com/advisories/19532

Source: cret@cert.org

http://secunia.com/advisories/19533

Source: cret@cert.org

http://secunia.com/advisories/19676

Source: cret@cert.org

http://secunia.com/advisories/19774

Source: cret@cert.org

http://secunia.com/advisories/20243

Source: cret@cert.org

http://secunia.com/advisories/20723

Source: cret@cert.org

http://securityreason.com/securityalert/612

Source: cret@cert.org

http://securityreason.com/securityalert/743

Source: cret@cert.org

http://securitytracker.com/id?1015801

Source: cret@cert.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.619600

Source: cret@cert.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102262-1

Source: cret@cert.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102324-1

Source: cret@cert.org

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200494-1

Source: cret@cert.org

http://support.avaya.com/elmodocs2/security/ASA-2006-074.htm

Source: cret@cert.org

http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm

Source: cret@cert.org

http://www-1.ibm.com/support/search.wss?rs=0&q=IY82992&apar=only

Source: cret@cert.org

http://www-1.ibm.com/support/search.wss?rs=0&q=IY82993&apar=only

Source: cret@cert.org

http://www-1.ibm.com/support/search.wss?rs=0&q=IY82994&apar=only

Source: cret@cert.org

http://www.ciac.org/ciac/bulletins/q-151.shtml

Source: cret@cert.org

http://www.debian.org/security/2006/dsa-1015

Source: cret@cert.org

http://www.f-secure.com/security/fsc-2006-2.shtml

Source: cret@cert.org

http://www.gentoo.org/security/en/glsa/glsa-200603-21.xml

Source: cret@cert.org

http://www.iss.net/threats/216.html

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/834865

Source: cret@cert.org

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:058

Source: cret@cert.org

http://www.novell.com/linux/security/advisories/2006_17_sendmail.html

Source: cret@cert.org

http://www.openbsd.org/errata38.html#sendmail

Source: cret@cert.org

http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.007-sendmail.html

Source: cret@cert.org

http://www.osvdb.org/24037

Source: cret@cert.org

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00017.html

Source: cret@cert.org

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00018.html

Source: cret@cert.org

http://www.redhat.com/support/errata/RHSA-2006-0264.html

Source: cret@cert.org

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2006-0265.html

Source: cret@cert.org

PatchVendor Advisory

http://www.securityfocus.com/archive/1/428536/100/0/threaded

Source: cret@cert.org

http://www.securityfocus.com/archive/1/428656/100/0/threaded

Source: cret@cert.org

http://www.securityfocus.com/bid/17192

Source: cret@cert.org

http://www.sendmail.com/company/advisory/index.shtml

Source: cret@cert.org

http://www.us-cert.gov/cas/techalerts/TA06-081A.html

Source: cret@cert.org

US Government Resource

http://www.vupen.com/english/advisories/2006/1049

Source: cret@cert.org

http://www.vupen.com/english/advisories/2006/1051

Source: cret@cert.org

http://www.vupen.com/english/advisories/2006/1068

Source: cret@cert.org

http://www.vupen.com/english/advisories/2006/1072

Source: cret@cert.org

http://www.vupen.com/english/advisories/2006/1139

Source: cret@cert.org

http://www.vupen.com/english/advisories/2006/1157

Source: cret@cert.org

http://www.vupen.com/english/advisories/2006/1529

Source: cret@cert.org

http://www.vupen.com/english/advisories/2006/2189

Source: cret@cert.org

http://www.vupen.com/english/advisories/2006/2490

Source: cret@cert.org

http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688

Source: cret@cert.org

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751

Source: cret@cert.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24584

Source: cret@cert.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11074

Source: cret@cert.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1689

Source: cret@cert.org

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.asc (unsafe URL)