← Back

CVE-2009-1490

nvd nist
Published: May 5, 2009Modified: Apr 23, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.

Affected (60)

Products: Sendmail: Sendmail
1 product
Sendmail
Configuration A
60 vulnerable
Vulnerable SoftwareAffected Versions
Sendmail
Up to 8.13.1.2
Version 2.6.1
Version 2.6.1
Version 2.6.2
Version 2.6
Version 2.6
Version 3.0.1
Version 3.0.1
Version 3.0.2
Version 3.0.2
Version 3.0.3
Version 3.0
Version 3.0
Version 4.1
Version 4.55
Version 5.59
Version 5.61
Version 5.65
Version 5
Version 8.10.0
Version 8.10.1
Version 8.10.2
Version 8.10
Version 8.11.0
Version 8.11.1
Version 8.11.2
Version 8.11.3
Version 8.11.4
Version 8.11.5
Version 8.11.6
Version 8.11.7
Version 8.12.0
Version 8.12.10
Version 8.12.11
Version 8.12.1
Version 8.12.2
Version 8.12.3
Version 8.12.4
Version 8.12.5
Version 8.12.6
Version 8.12.7
Version 8.12.8
Version 8.12.9
Version 8.12 beta10
Version 8.12 beta12
Version 8.12 beta16
Version 8.12 beta5
Version 8.12 beta7
Version 8.13.0
Version 8.6.7
Version 8.7.10
Version 8.7.6
Version 8.7.7
Version 8.7.8
Version 8.7.9
Version 8.8.8
Version 8.9.0
Version 8.9.1
Version 8.9.2
Version 8.9.3

References (6)

Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.