← Back

CVE-2009-4565

nvd nist
Published: Jan 4, 2010Modified: Apr 23, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Affected (62)

Products: Sendmail: Sendmail
Sendmail
1 product
Sendmail
Configuration A
62 vulnerable
Vulnerable SoftwareAffected Versions
Sendmail
Sendmail
Up to 8.14.3
Sendmail
Version 2.6.1
Sendmail
Version 2.6
Sendmail
Version 3.0.1
Sendmail
Version 3.0
Sendmail
Version 4.1
Sendmail
Version 4.55
Sendmail
Version 5.59
Sendmail
Version 5.61
Sendmail
Version 5.65
Sendmail
Version 5
Sendmail
Version 8.10.0
Sendmail
Version 8.10.1
Sendmail
Version 8.10.2
Sendmail
Version 8.10
Sendmail
Version 8.11.0
Sendmail
Version 8.11.1
Sendmail
Version 8.11.2
Sendmail
Version 8.11.3
Sendmail
Version 8.11.4
Sendmail
Version 8.11.5
Sendmail
Version 8.11.6
Sendmail
Version 8.11.7
Sendmail
Version 8.12.0
Sendmail
Version 8.12.10
Sendmail
Version 8.12.1
Sendmail
Version 8.12.2
Sendmail
Version 8.12.3
Sendmail
Version 8.12.4
Sendmail
Version 8.12.5
Sendmail
Version 8.12.6
Sendmail
Version 8.12.7
Sendmail
Version 8.12.8
Sendmail
Version 8.12.9
Sendmail
Version 8.12 beta10
Sendmail
Version 8.12 beta12
Sendmail
Version 8.12 beta16
Sendmail
Version 8.12 beta5
Sendmail
Version 8.12 beta7
Sendmail
Version 8.13.0
Sendmail
Version 8.13.1.2
Sendmail
Version 8.13.1
Sendmail
Version 8.13.2
Sendmail
Version 8.13.3
Sendmail
Version 8.13.4
Sendmail
Version 8.13.5
Sendmail
Version 8.13.6
Sendmail
Version 8.13.7
Sendmail
Version 8.13.8
Sendmail
Version 8.14.1
Sendmail
Version 8.14.2
Sendmail
Version 8.6.7
Sendmail
Version 8.7.10
Sendmail
Version 8.7.6
Sendmail
Version 8.7.7
Sendmail
Version 8.7.8
Sendmail
Version 8.7.9
Sendmail
Version 8.8.8
Sendmail
Version 8.9.0
Sendmail
Version 8.9.1
Sendmail
Version 8.9.2
Sendmail
Version 8.9.3

Related CWEs

CWE-310
CWE-310

References (40)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.