Sendmail Unspecified Denial Of Service Vulnerability

Bugtraq ID:	23606
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 23 2007 12:00AM
Updated:	Apr 26 2007 03:20AM
Credit:	HP is credited with the discovery of this vulnerability.
Vulnerable:	Sendmail Consortium Sendmail 8.11.1 + Caldera OpenLinux Server 3.1 + Caldera OpenLinux Workstation 3.1 Sendmail Consortium Sendmail 8.9.3 + Compaq Tru64 5.1 PK5 (BL19) + Compaq Tru64 5.0 a PK3 (BL17) + Debian Linux 2.2 sparc + Debian Linux 2.2 powerpc + Debian Linux 2.2 IA-32 + Debian Linux 2.2 arm + Debian Linux 2.2 alpha + Debian Linux 2.2 68k + Debian Linux 2.2 + IBM AIX 4.3.3 + SGI IRIX 6.5.19 + SGI IRIX 6.5.18 m + SGI IRIX 6.5.18 f + SGI IRIX 6.5.17 m + SGI IRIX 6.5.17 f + SGI IRIX 6.5.16 m + SGI IRIX 6.5.16 f + SGI IRIX 6.5.15 m + SGI IRIX 6.5.15 f + SGI IRIX 6.5.14 m + SGI IRIX 6.5.14 f + SGI IRIX 6.5.13 m + SGI IRIX 6.5.13 f + SGI IRIX 6.5.12 m + SGI IRIX 6.5.12 f + SGI IRIX 6.5.11 m + SGI IRIX 6.5.11 f + SGI IRIX 6.5.10 m + SGI IRIX 6.5.10 f + SGI IRIX 6.5.9 m + SGI IRIX 6.5.9 f + SGI IRIX 6.5.8 m + SGI IRIX 6.5.8 f + SGI IRIX 6.5.7 m + SGI IRIX 6.5.7 f HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.00
Not Vulnerable:	Sendmail Consortium Sendmail 8.13.3

Sendmail Unspecified Denial Of Service Vulnerability

Sendmail is prone to a denial-of-service vulnerability.

No further information is available at the moment.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

Insufficient information is currently available to determine whether this is only an HP-specific issue. This BID will be updated as soon as more information emerges.

This issue may have already been disclosed in a previous BID, but not enougyh information is available for a proper correlation at this time. This BID may be retired as more information emerges.

Sendmail Unspecified Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Sendmail Unspecified Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Please see the references for more information.


HP HP-UX B.11.23

• HP Sendmail 8.13.3 Special Release Upgrade
  https://h20293.www2.hp.com/portal/swdepot/try.do?productNumber=SMAIL81 3

Sendmail Unspecified Denial Of Service Vulnerability

References:

• Sendmail Homepage (Sendmail Consortium)
  
• Vulnerability Note VU#349305 HP-UX sendmail vulnerable to denial of service (US-CERT)