İçeriğe atla
Noroxi

sendmail kayıtları

sendmail üreticisine ait 33 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %3
Pre-auth RCE
6
Düzeltme kaydı olan
%60,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

33 kayıt
  • CVE-2002-1337
    62Bu hafta

    Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related t

    KritikCVSS 10,0Kavram kanıtıEPSS %73

    sendmail · sendmail7 Mar 2003

  • CVE-2003-0694
    60Bu hafta

    The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using

    KritikCVSS 10,0SilahlaştırılmışEPSS %66

    sendmail · advanced message server6 Eki 2003

  • CVE-2003-0161
    52Planlayın

    The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char

    KritikCVSS 10,0Kavram kanıtıEPSS %39

    sendmail · sendmail2 Nis 2003

  • CVE-2006-0058
    39İzleyin

    Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a

    YüksekCVSS 7,6Kavram kanıtıEPSS %29

    sendmail · sendmail22 Mar 2006

  • CVE-2003-0681
    37İzleyin

    A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) m

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    sendmail · advanced message server6 Eki 2003

  • CVE-2007-2246
    32İzleyin

    Unspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1; and HP-UX B.11.23 when running sendmail 8.11.

    YüksekCVSS 7,8İstismar yokEPSS %2

    hp · hp-ux25 Nis 2007

  • CVE-2006-4434
    31İzleyin

    Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header line"

    YüksekCVSS 7,5İstismar yokEPSS %5

    sendmail · sendmail28 Ağu 2006

  • CVE-2002-0906
    31İzleyin

    Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a

    YüksekCVSS 7,5İstismar yokEPSS %4

    sendmail · sendmail4 Eki 2002

  • CVE-2009-4565
    31İzleyin

    sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-i

    YüksekCVSS 7,5İstismar yokEPSS %2

    sendmail · sendmail4 Oca 2010

  • CVE-2002-2261
    31İzleyin

    Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a b

    YüksekCVSS 7,5İstismar yokEPSS %2

    sendmail · sendmail31 Ara 2002

  • CVE-2021-3618
    30İzleyin

    ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatib

    YüksekCVSS 7,4İstismar yokEPSS %2

    f5 · nginx23 Mar 2022

  • CVE-1999-1592
    30İzleyin

    Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact

    YüksekCVSS 7,5İstismar yokEPSS %1

    sun · sunos31 Ara 1999

  • CVE-2006-7175
    30İzleyin

    The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not allow the administrator to disable SSLv2 encryp

    YüksekCVSS 7,5İstismar yokEPSS %1

    sendmail · sendmail27 Mar 2007

  • CVE-1999-1580
    28İzleyin

    SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modif

    YüksekCVSS 7,2İstismar yokEPSS %1

    sendmail · sendmail23 Ağu 1995

  • CVE-1999-1309
    28İzleyin

    Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option.

    YüksekCVSS 7,2İstismar yokEPSS %0

    sendmail · sendmail30 Ağu 1996

  • CVE-2003-0308
    28İzleyin

    The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain addition

    YüksekCVSS 7,2İstismar yokEPSS %0

    sendmail · sendmail15 May 2003

  • CVE-2002-2423
    25İzleyin

    Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address fr

    OrtaCVSS 6,4İstismar yokEPSS %1

    sendmail · sendmail31 Ara 2002

  • CVE-2009-1490
    24İzleyin

    Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execut

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    sendmail · sendmail5 May 2009

  • CVE-1999-1109
    22İzleyin

    Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the

    OrtaCVSS 5,0Kavram kanıtıEPSS %7

    sendmail · sendmail22 Ara 1999

  • CVE-2006-1173
    22İzleyin

    Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaus

    OrtaCVSS 5,0İstismar yokEPSS %5

    sendmail · sendmail7 Haz 2006

  • CVE-2003-0688
    21İzleyin

    The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, wh

    OrtaCVSS 5,0İstismar yokEPSS %4

    sendmail · sendmail20 Eki 2003

  • CVE-2023-51765
    21İzleyin

    sendmail through 8.17.2 allows SMTP smuggling in certain configurations.

    OrtaCVSS 5,3İstismar yokEPSS %1

    sendmail · sendmail24 Ara 2023

  • CVE-2005-2070
    20İzleyin

    The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a den

    OrtaCVSS 5,0İstismar yokEPSS %2

    sendmail · sendmail29 Haz 2005

  • CVE-1999-0478
    20İzleyin

    Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.

    OrtaCVSS 5,0İstismar yokEPSS %1

    sendmail · sendmail1 Ara 1998

  • CVE-2006-7176
    18İzleyin

    The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name

    OrtaCVSS 4,3İstismar yokEPSS %2

    sendmail · sendmail27 Mar 2007