Red Hat Security AdvisoryRHSA-2010:0237
sendmail security and bug fix update
Released 2010-03-29 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) sendmail-8.13.8-8.el5, sendmail-8.13.8-8.el5.i386, sendmail-8.13.8-8.el5.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) sendmail-8.13.8-8.el5, sendmail-8.13.8-8.el5.i386, sendmail-cf-8.13.8-8.el5 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) sendmail-8.13.8-8.el5, sendmail-devel-8.13.8-8.el5, sendmail-devel-8.13.8-8.el5.i386
Fixes 2 records
Priority LOW 37
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted s…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02395 · Published 2010-01-04 · Fixed CWE-310
Priority LOW 24
The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote atta…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02067 · Published 2007-03-27 · Fixed
