← back
CVE-2006-0058

CVE-2006-0058

EPSS 28.1%
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/2051unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.ascftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-010.txt.ascftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.24/SCOSA-2006.24.txtftp://patches.sgi.com/support/free/security/advisories/20060302-01-Pftp://patches.sgi.com/support/free/security/advisories/20060401-01-Uhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635http://secunia.com/advisories/19342http://secunia.com/advisories/19345http://secunia.com/advisories/19346http://secunia.com/advisories/19349http://secunia.com/advisories/19356