Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Bugtraq ID:	37543
Class:	Design Error
CVE:	CVE-2009-4565
Remote:	Yes
Local:	No
Published:	Dec 30 2009 12:00AM
Updated:	Apr 13 2015 09:15PM
Credit:	The vendor reported this issue.
Vulnerable:	Turbolinux Turbolinux Server 10.0 Turbolinux Turbolinux Server 10.0.0 x64 Turbolinux Appliance Server 2.0 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 SuSE SUSE Linux Enterprise 10 SP2 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_98 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_74 Sun OpenSolaris build snv_71 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_56 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_51 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_48 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_38 Sun OpenSolaris build snv_37 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_35 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_28 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_131 Sun OpenSolaris build snv_130 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_129 Sun OpenSolaris build snv_128 Sun OpenSolaris build snv_127 Sun OpenSolaris build snv_126 Sun OpenSolaris build snv_125 Sun OpenSolaris build snv_124 Sun OpenSolaris build snv_123 Sun OpenSolaris build snv_122 Sun OpenSolaris build snv_121 Sun OpenSolaris build snv_120 Sun OpenSolaris build snv_119 Sun OpenSolaris build snv_118 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sendmail Consortium Sendmail 8.14.3 Sendmail Consortium Sendmail 8.13.8 Sendmail Consortium Sendmail 8.13.7 Sendmail Consortium Sendmail 8.13.6 Sendmail Consortium Sendmail 8.13.5 Sendmail Consortium Sendmail 8.13.4 Sendmail Consortium Sendmail 8.13.3 Sendmail Consortium Sendmail 8.13.2 Sendmail Consortium Sendmail 8.13.1 Sendmail Consortium Sendmail 8.12.11 Sendmail Consortium Sendmail 8.12.10 Sendmail Consortium Sendmail 8.12.9 Sendmail Consortium Sendmail 8.12.8 Sendmail Consortium Sendmail 8.12.7 Sendmail Consortium Sendmail 8.12.6 Sendmail Consortium Sendmail 8.12.5 Sendmail Consortium Sendmail 8.12.4 Sendmail Consortium Sendmail 8.12.3 Sendmail Consortium Sendmail 8.12.2 Sendmail Consortium Sendmail 8.12.1 Sendmail Consortium Sendmail 8.12 .0 Sendmail Consortium Sendmail 8.11.7 Sendmail Consortium Sendmail 8.11.6 Sendmail Consortium Sendmail 8.11.5 Sendmail Consortium Sendmail 8.11.4 - Slackware Linux 8.0 Sendmail Consortium Sendmail 8.11.3 Sendmail Consortium Sendmail 8.11.2 + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha + Redhat Linux 7.1 + SuSE Linux 7.1 x86 + SuSE Linux 7.1 sparc + SuSE Linux 7.1 ppc + SuSE Linux 7.1 alpha + SuSE Linux 7.1 Sendmail Consortium Sendmail 8.11.1 Sendmail Consortium Sendmail 8.11 + Compaq Tru64 5.1 b + Compaq Tru64 5.1 a + Compaq Tru64 5.1 + IBM AIX 5.2 + IBM AIX 5.1 - Mandriva Linux Mandrake 7.2 + Redhat Linux 7.0 sparc + Redhat Linux 7.0 i386 + Redhat Linux 7.0 alpha + Redhat Linux 7.0 + SCO Open Server 5.0.6 a + SCO Open Server 5.0.6 + SCO Open Server 5.0.5 + SCO Open Server 5.0.4 - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 alpha - SuSE Linux 7.0 Sendmail Consortium Sendmail 8.10.2 Sendmail Consortium Sendmail 8.10.1 Sendmail Consortium Sendmail 8.10 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 rPath rPath Linux 2 rPath rPath Linux 1 rPath Appliance Platform Linux Service 2 rPath Appliance Platform Linux Service 1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server McAfee Data Loss Prevention 9.2.2 McAfee Data Loss Prevention 9.2.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 IBM AIX 6.1.3 IBM AIX 6.1.2 IBM AIX 6.1.1 IBM AIX 5.3.10 IBM AIX 5.3.9 IBM AIX 5.3.8 IBM AIX 5.3.7 IBM AIX 5.3 L IBM AIX 6.1 IBM AIX 5.3 HP HP-UX B.11.31 HP HP-UX B.11.11 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Avaya Proactive Contact 4.2 Avaya Messaging Storage Server MSS 5.1 Avaya Messaging Storage Server MSS 4.1 Avaya Messaging Storage Server 5.2 SP3 Avaya Messaging Storage Server 5.2 SP2 Avaya Messaging Storage Server 5.2 SP1 Avaya Messaging Storage Server 5.2 Avaya Messaging Storage Server 5.1 SP2 Avaya Messaging Storage Server 5.1 SP1 Avaya Messaging Storage Server 5.1 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Message Networking 5.2.1 Avaya Message Networking MN 3.1 Avaya Message Networking 5.2 SP1 Avaya Message Networking 5.2 Avaya Message Networking 3.1 Avaya Message Networking Avaya IQ 5 Avaya Intuity AUDIX LX 2.0 SP2 Avaya Intuity AUDIX LX 2.0 SP1 Avaya Intuity AUDIX LX 2.0 Avaya Intuity LX 2.0
Not Vulnerable:	Sun OpenSolaris build snv_132 Sendmail Consortium Sendmail 8.14.4 McAfee Data Loss Prevention 9.3.2 HP HP-UX C.8.13.3.5 HP HP-UX B.11.23.1.007 HP HP-UX B.11.11.02.008

Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Sendmail is prone to a security-bypass vulnerability because the application fails to properly validate the domain name in a signed CA certificate, allowing attackers to substitute malicious SSL certificates for trusted ones.

Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.

Versions prior to Sendmail 8.14.4 are vulnerable.

Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Attackers use man-in-the-middle attacks to exploit this issue.

Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Sun Solaris 10_sparc

• Sun 120302-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120302-01-1


• Sun 142436-04
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -142436-04-1

Debian Linux 5.0 alpha

• Debian libmilter-dev_8.14.3-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.14.3-5+lenny1_alpha.deb


• Debian libmilter1.0.1-dbg_8.14.3-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter1.0.1 -dbg_8.14.3-5+lenny1_alpha.deb


• Debian libmilter1.0.1_8.14.3-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter1.0.1 _8.14.3-5+lenny1_alpha.deb


• Debian rmail_8.14.3-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.14.3-5 +lenny1_alpha.deb


• Debian sendmail-base_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_ 8.14.3-5+lenny1_all.deb


• Debian sendmail-bin_8.14.3-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8 .14.3-5+lenny1_alpha.deb


• Debian sendmail-cf_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8. 14.3-5+lenny1_all.deb


• Debian sendmail-doc_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8 .14.3-5+lenny1_all.deb


• Debian sendmail_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.14. 3-5+lenny1_all.deb


• Debian sensible-mda_8.14.3-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8 .14.3-5+lenny1_alpha.deb

Mandriva Linux Mandrake 2008.0

• Mandriva sendmail-8.14.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-cf-8.14.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-devel-8.14.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-doc-8.14.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 amd64

• Debian libmilter-dev_8.13.8-3+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.13.8-3+etch1_amd64.deb


• Debian libmilter0-dbg_8.13.8-3+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter0-dbg _8.13.8-3+etch1_amd64.deb


• Debian libmilter0_8.13.8-3+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.1 3.8-3+etch1_amd64.deb


• Debian rmail_8.13.8-3+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.8-3 +etch1_amd64.deb


• Debian sendmail-base_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_ 8.13.8-3+etch1_all.deb


• Debian sendmail-bin_8.13.8-3+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8 .13.8-3+etch1_amd64.deb


• Debian sendmail-cf_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8. 13.8-3+etch1_all.deb


• Debian sendmail-doc_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8 .13.8-3+etch1_all.deb


• Debian sendmail_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13. 8-3+etch1_all.deb


• Debian sensible-mda_8.13.8-3+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8 .13.8-3+etch1_amd64.deb

Debian Linux 4.0 ia-32

• Debian libmilter-dev_8.13.8-3+etch1_i386.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.13.8-3+etch1_i386.deb


• Debian libmilter0-dbg_8.13.8-3+etch1_i386.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter0-dbg _8.13.8-3+etch1_i386.deb


• Debian libmilter0_8.13.8-3+etch1_i386.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.1 3.8-3+etch1_i386.deb


• Debian rmail_8.13.8-3+etch1_i386.deb
  http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.8-3 +etch1_i386.deb


• Debian sendmail-base_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_ 8.13.8-3+etch1_all.deb


• Debian sendmail-bin_8.13.8-3+etch1_i386.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8 .13.8-3+etch1_i386.deb


• Debian sendmail-cf_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8. 13.8-3+etch1_all.deb


• Debian sendmail-doc_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8 .13.8-3+etch1_all.deb


• Debian sendmail_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13. 8-3+etch1_all.deb


• Debian sensible-mda_8.13.8-3+etch1_i386.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8 .13.8-3+etch1_i386.deb

Debian Linux 5.0 armel

• Debian libmilter-dev_8.14.3-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.14.3-5+lenny1_armel.deb


• Debian libmilter1.0.1-dbg_8.14.3-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter1.0.1 -dbg_8.14.3-5+lenny1_armel.deb


• Debian libmilter1.0.1_8.14.3-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter1.0.1 _8.14.3-5+lenny1_armel.deb


• Debian rmail_8.14.3-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.14.3-5 +lenny1_armel.deb


• Debian sendmail-base_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_ 8.14.3-5+lenny1_all.deb


• Debian sendmail-bin_8.14.3-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8 .14.3-5+lenny1_armel.deb


• Debian sendmail-cf_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8. 14.3-5+lenny1_all.deb


• Debian sendmail-doc_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8 .14.3-5+lenny1_all.deb


• Debian sendmail_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.14. 3-5+lenny1_all.deb


• Debian sensible-mda_8.14.3-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8 .14.3-5+lenny1_armel.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva sendmail-8.14.3-2.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-cf-8.14.3-2.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-devel-8.14.3-2.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-doc-8.14.3-2.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian libmilter-dev_8.14.3-5+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.14.3-5+lenny1_mips.deb


• Debian libmilter1.0.1-dbg_8.14.3-5+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter1.0.1 -dbg_8.14.3-5+lenny1_mips.deb


• Debian libmilter1.0.1_8.14.3-5+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter1.0.1 _8.14.3-5+lenny1_mips.deb


• Debian rmail_8.14.3-5+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.14.3-5 +lenny1_mips.deb


• Debian sendmail-base_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_ 8.14.3-5+lenny1_all.deb


• Debian sendmail-bin_8.14.3-5+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8 .14.3-5+lenny1_mips.deb


• Debian sendmail-cf_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8. 14.3-5+lenny1_all.deb


• Debian sendmail-doc_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8 .14.3-5+lenny1_all.deb


• Debian sendmail_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.14. 3-5+lenny1_all.deb


• Debian sensible-mda_8.14.3-5+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8 .14.3-5+lenny1_mips.deb

Debian Linux 4.0 mips

• Debian sendmail-base_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_ 8.13.8-3+etch1_all.deb


• Debian sendmail-cf_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8. 13.8-3+etch1_all.deb


• Debian sendmail-doc_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8 .13.8-3+etch1_all.deb


• Debian sendmail_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13. 8-3+etch1_all.deb

Debian Linux 5.0 sparc

• Debian libmilter-dev_8.14.3-5+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.14.3-5+lenny1_sparc.deb


• Debian libmilter1.0.1-dbg_8.14.3-5+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter1.0.1 -dbg_8.14.3-5+lenny1_sparc.deb


• Debian libmilter1.0.1_8.14.3-5+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter1.0.1 _8.14.3-5+lenny1_sparc.deb


• Debian rmail_8.14.3-5+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.14.3-5 +lenny1_sparc.deb


• Debian sendmail-base_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_ 8.14.3-5+lenny1_all.deb


• Debian sendmail-bin_8.14.3-5+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8 .14.3-5+lenny1_sparc.deb


• Debian sendmail-cf_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8. 14.3-5+lenny1_all.deb


• Debian sendmail-doc_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8 .14.3-5+lenny1_all.deb


• Debian sendmail_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.14. 3-5+lenny1_all.deb


• Debian sensible-mda_8.14.3-5+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8 .14.3-5+lenny1_sparc.deb

Debian Linux 4.0 arm

• Debian libmilter-dev_8.13.8-3+etch1_arm.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.13.8-3+etch1_arm.deb


• Debian libmilter0-dbg_8.13.8-3+etch1_arm.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter0-dbg _8.13.8-3+etch1_arm.deb


• Debian libmilter0_8.13.8-3+etch1_arm.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.1 3.8-3+etch1_arm.deb


• Debian rmail_8.13.8-3+etch1_arm.deb
  http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.8-3 +etch1_arm.deb


• Debian sendmail-base_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_ 8.13.8-3+etch1_all.deb


• Debian sendmail-bin_8.13.8-3+etch1_arm.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8 .13.8-3+etch1_arm.deb


• Debian sendmail-cf_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8. 13.8-3+etch1_all.deb


• Debian sendmail-doc_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8 .13.8-3+etch1_all.deb


• Debian sendmail_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13. 8-3+etch1_all.deb


• Debian sensible-mda_8.13.8-3+etch1_arm.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8 .13.8-3+etch1_arm.deb

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva sendmail-8.14.3-3.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-cf-8.14.3-3.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-devel-8.14.3-3.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-doc-8.14.3-3.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 powerpc

• Debian libmilter-dev_8.13.8-3+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.13.8-3+etch1_powerpc.deb


• Debian libmilter0-dbg_8.13.8-3+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter0-dbg _8.13.8-3+etch1_powerpc.deb


• Debian libmilter0_8.13.8-3+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.1 3.8-3+etch1_powerpc.deb


• Debian rmail_8.13.8-3+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.8-3 +etch1_powerpc.deb


• Debian sendmail-base_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_ 8.13.8-3+etch1_all.deb


• Debian sendmail-bin_8.13.8-3+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8 .13.8-3+etch1_powerpc.deb


• Debian sendmail-cf_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8. 13.8-3+etch1_all.deb


• Debian sendmail-doc_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8 .13.8-3+etch1_all.deb


• Debian sendmail_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13. 8-3+etch1_all.deb


• Debian sensible-mda_8.13.8-3+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8 .13.8-3+etch1_powerpc.deb

Debian Linux 4.0 m68k

• Debian sendmail-base_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_ 8.13.8-3+etch1_all.deb


• Debian sendmail-cf_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8. 13.8-3+etch1_all.deb


• Debian sendmail-doc_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8 .13.8-3+etch1_all.deb


• Debian sendmail_8.13.8-3+etch1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13. 8-3+etch1_all.deb

MandrakeSoft Enterprise Server 5

• Mandriva sendmail-8.14.3-2.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-cf-8.14.3-2.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-devel-8.14.3-2.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva sendmail-doc-8.14.3-2.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian libmilter-dev_8.14.3-5+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.14.3-5+lenny1_s390.deb


• Debian libmilter1.0.1-dbg_8.14.3-5+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter1.0.1 -dbg_8.14.3-5+lenny1_s390.deb


• Debian libmilter1.0.1_8.14.3-5+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter1.0.1 _8.14.3-5+lenny1_s390.deb


• Debian rmail_8.14.3-5+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.14.3-5 +lenny1_s390.deb


• Debian sendmail-base_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_ 8.14.3-5+lenny1_all.deb


• Debian sendmail-bin_8.14.3-5+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8 .14.3-5+lenny1_s390.deb


• Debian sendmail-cf_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8. 14.3-5+lenny1_all.deb


• Debian sendmail-doc_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8 .14.3-5+lenny1_all.deb


• Debian sendmail_8.14.3-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.14. 3-5+lenny1_all.deb


• Debian sensible-mda_8.14.3-5+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8 .14.3-5+lenny1_s390.deb

Turbolinux Turbolinux Server 10.0

• Turbolinux sendmail-8.13.1-11.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/misc/RPMS/sendmail-8.13.1-11.i586.rpm


• Turbolinux sendmail-cf-8.13.1-11.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/misc/RPMS/sendmail-cf-8.13.1-11.i586.rpm


• Turbolinux sendmail-devel-8.13.1-11.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/misc/RPMS/sendmail-devel-8.13.1-11.i586.rpm


• Turbolinux sendmail-doc-8.13.1-11.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/misc/RPMS/sendmail-doc-8.13.1-11.i586.rpm


• Turbolinux sendmail-vacation-8.13.1-11.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/misc/RPMS/sendmail-vacation-8.13.1-11.i586.rpm

Sendmail Consortium Sendmail 8.10.1

• Sendmail Consortium sendmail.8.14.4.tar.gz
  ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.4.tar.gz

Sendmail Consortium Sendmail 8.11

• Sendmail Consortium sendmail.8.14.4.tar.gz
  ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.4.tar.gz

Sendmail Consortium Sendmail 8.11.2

• Sendmail Consortium sendmail.8.14.4.tar.gz
  ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.4.tar.gz

Sendmail Consortium Sendmail 8.11.4

• Sendmail Consortium sendmail.8.14.4.tar.gz
  ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.4.tar.gz

Sendmail Consortium Sendmail 8.11.5

• Sendmail Consortium sendmail.8.14.4.tar.gz
  ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.4.tar.gz

Sendmail Consortium Sendmail 8.12.11

• Sendmail Consortium sendmail.8.14.4.tar.gz
  ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.4.tar.gz

Sendmail Consortium Sendmail 8.13.2

• Sendmail Consortium sendmail.8.14.4.tar.gz
  ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.4.tar.gz

Sendmail Consortium Sendmail 8.13.5

• Sendmail Consortium sendmail.8.14.4.tar.gz
  ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.4.tar.gz

Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

References:

• McAfee Data Loss Prevention 9.3.2 (McAfee)
  
• Sendmail - 8.14.4 Release (Sendmail)
  
• Sendmail Homepage (Sendmail Consortium)
  
• [security bulletin] HPSBUX02508 SSRT100007 rev.2 - HP-UX Running sendmail with S ([email protected])
  
• 275870 A Security Vulnerability Relating to Certificate Handling in sendmail (Oracle)
  
• A Security Vulnerability Relating to Certificate Handling in sendmail(1M) Versio (Oracle)
  
• ASA-2010-114 sendmail security and bug fix update (RHSA-2010-0237) (Avaya)
  
• ASA-2011-081 sendmail security and bug fix update (RHSA-2011-0262) (Avaya)
  
• HPSBUX02508 SSRT100007 rev.1 - HP-UX Running sendmail with STARTTLS Enabled, Rem (HP)
  
• IZ72510: SENDMAIL TLS SERVER VULNERABILITY CVE-2009-4565 (IBM)
  
• IZ72515: SENDMAIL TLS SERVER VULNERABILITY CVE-2009-4565 (IBM)
  
• IZ72526: SENDMAIL TLS SERVER VULNERABILITY CVE-2009-4565 (IBM)
  
• IZ72528: SENDMAIL TLS SERVER VULNERABILITY CVE-2009-4565 (IBM)
  
• IZ72539: SENDMAIL TLS SERVER VULNERABILITY CVE-2009-4565 (IBM)
  
• IZ72602: SENDMAIL TLS SERVER VULNERABILITY CVE-2009-4565 (IBM)
  
• SB10074: McAfee Security Bulletin �?? McAfee Data Loss Prevention addresses four s (McAfee)