| Package | Affected versions | Patched versions |
|---|---|---|
| advanced message server | = 1.2= 1.3 | |
| sendmail | = 2.6= 2.6.1= 2.6.2= 3.0= 3.0.1= 3.0.2= 3.0.3= 8.10= 8.10.1= 8.10.2= 8.11.0= 8.11.1= 8.11.2= 8.11.3= 8.11.4= 8.11.5= 8.11.6= 8.12= 8.12.0= 8.12.1= 8.12.2= 8.12.3= 8.12.4= 8.12.5= 8.12.6= 8.12.7= 8.12.8= 8.12.9= 8.8.8= 8.9.0= 8.9.1= 8.9.2= 8.9.3 | |
| sendmail pro | = 8.9.2= 8.9.3 | |
| sendmail switch | = 2.1= 2.1.1= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.2= 2.2.1= 2.2.2= 2.2.3= 2.2.4= 2.2.5= 3.0= 3.0.1= 3.0.2= 3.0.3 |
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free