s700_800 11.04 (VVOS) sendmail(1m) 8.9.3 patch : 

A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability could be exploited remotely to gain unauthorized privileged access. References: CERT/CC CA-2003-25, CAN-2003-0681.

A buffer overflow vulnerability was discovered in the address parsing code in all versions of sendmail prior to 8.12.10 by Michal Zalewski, with a patch to fix the problem provided by Todd C. Miller. This vulnerability seems to be remotely exploitable on Linux systems running on the x86 platform; the sendmail team is unsure of other platforms (CVE-2003-0694).

Another potential buffer overflow was fixed in ruleset parsing which is not exploitable in the default sendmail configuration. A problem may occur if non-standard rulesets recipient (2), final (4), or mailer- specific envelope recipients rulesets are use. This problem was discovered by Timo Sirainen (CVE-2003-0681).

MandrakeSoft encourages all users who use sendmail to upgrade to the provided packages which are patched to fix both problems.

s700_800 11.23 sendmail(1M) 8.11.1 patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential security vulnerability has been identified     with HP-UX running sendmail. This vulnerability could     allow a remote user to cause a Denial of Service (DoS).
    (HPSBUX02183 SSRT061243)

  - A vulnerability has been identified in sendmail which     may allow a remote attacker to execute arbitrary code.
    References: CVE-2006-0058, US-CERT VU#834865.
    (HPSBUX02108 SSRT061133)

  - A potential security vulnerability has been identified     with HP-UX running sendmail, where the vulnerability     could be exploited remotely to gain unauthorized     privileged access. References: CERT/CC CA-2003-25,     CAN-2003-0681. (HPSBUX00281 SSRT3631)

根据其版本号，远程 Sendmail 服务器的版本在 5.79 到 8.12.9 之间。有报告称此类版本容易遭受两种远程缓冲区溢出攻击，一种在“prescan()”函数中，另一种涉及其规则集处理。远程用户可能会利用这些问题获取根权限。

バージョン番号によると、リモート sendmail サーバーは、5.79 と 8.12.9 の間です。このようなバージョンは、報告されているところによれば、リモートバッファオーバーフロー攻撃に対して脆弱であり、1 つは「prescan()」機能、他はそのルールセットの処理に関連するものです。リモートユーザーは、これらの問題を利用して、root 権限を得ることができる場合があります。

s700_800 11.22 sendmail(1m) 8.11.1 patch : 

A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability could be exploited remotely to gain unauthorized privileged access. References: CERT/CC CA-2003-25, CAN-2003-0681.

s700_800 11.00 sendmail(1M) 8.9.3 patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential security vulnerability has been identified     with HP-UX running sendmail, where the vulnerability may     be exploited remotely to gain unauthorized access and     create a Denial of Service (DoS). References: CERT     CA-2003-07, CAN-2002-1337. (HPSBUX00246 SSRT3469)

  - A vulnerability has been identified in sendmail which     may allow a remote attacker to execute arbitrary code.
    References: CVE-2006-0058, US-CERT VU#834865.
    (HPSBUX02108 SSRT061133)

  - A potential security vulnerability has been identified     with HP-UX running sendmail, where the vulnerability     could be exploited remotely to gain unauthorized     privileged access. References: CERT/CC CA-2003-25,     CAN-2003-0681. (HPSBUX00281 SSRT3631)

  - A potential security vulnerability has been identified     with HP-UX sendmail, where the vulnerability may be     exploited remotely to gain unauthorized access or create     a denial of service (DoS). References: CERT CA-2003-12.
    (HPSBUX00253 SSRT3531)

  - A potential security vulnerability has been identified     with HP-UX running sendmail. This vulnerability could     allow a remote user to cause a Denial of Service (DoS).
    (HPSBUX02183 SSRT061243)

According to its version number, the remote Sendmail server is between 5.79 to 8.12.9.  Such versions are reportedly vulnerable to remote buffer overflow attacks, one in the 'prescan()' function and another involving its ruleset processing.  A remote user may be able to leverage these issues to gain root privileges.

Two vulnerabilities were reported in sendmail.

  - CAN-2003-0681 :
    A 'potential buffer overflow in ruleset parsing' for     Sendmail 8.12.9, when using the nonstandard rulesets (1)     recipient (2), final, or (3) mailer-specific envelope     recipients, has unknown consequences.

  - CAN-2003-0694 :

    The prescan function in Sendmail 8.12.9 allows remote     attackers to execute arbitrary code via buffer overflow     attacks, as demonstrated using the parseaddr function in     parseaddr.c.

s700_800 11.11 sendmail(1M) 8.9.3 patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential security vulnerability has been identified     with HP-UX running sendmail, where the vulnerability     could be exploited remotely to gain unauthorized     privileged access. References: CERT/CC CA-2003-25,     CAN-2003-0681. (HPSBUX00281 SSRT3631)

  - A vulnerability has been identified in sendmail which     may allow a remote attacker to execute arbitrary code.
    References: CVE-2006-0058, US-CERT VU#834865.
    (HPSBUX02108 SSRT061133)

  - A potential security vulnerability has been identified     with HP-UX sendmail, where the vulnerability may be     exploited remotely to gain unauthorized access or create     a denial of service (DoS). References: CERT CA-2003-12.
    (HPSBUX00253 SSRT3531)

  - A potential security vulnerability has been identified     with HP-UX running sendmail. This vulnerability could     allow a remote user to cause a Denial of Service (DoS).
    (HPSBUX02183 SSRT061243)

  - A potential security vulnerability has been identified     with HP-UX running sendmail, where the vulnerability may     be exploited remotely to gain unauthorized access and     create a Denial of Service (DoS). References: CERT     CA-2003-07, CAN-2002-1337. (HPSBUX00246 SSRT3469)

The remote Sendmail server may be vulnerable to a remote buffer overflow that can be exploited by an attacker to gain a root shell on this host.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
16704	HP-UX PHNE_30224 : HP-UX sendmail, Remote Unauthorized Privileged Access (HPSBUX00281 SSRT3631 rev.11)	Nessus	HP-UX Local Security Checks	2005/2/16	2021/1/11	critical
14074	Mandrake Linux Security Advisory : sendmail (MDKSA-2003:092)	Nessus	Mandriva Local Security Checks	2004/7/31	2021/1/6	critical
26135	HP-UX PHNE_35485 : s700_800 11.23 sendmail(1M) 8.11.1 patch	Nessus	HP-UX Local Security Checks	2007/9/25	2021/1/11	critical
11838	Sendmail < 8.12.10 prescan() 函数远程溢出	Nessus	SMTP problems	2003/9/17	2018/11/15	critical
11838	Sendmail < 8.12.10 の prescan() 機能のリモートオーバーフロー	Nessus	SMTP problems	2003/9/17	2018/11/15	critical
16855	HP-UX PHNE_29912 : HP-UX sendmail, Remote Unauthorized Privileged Access (HPSBUX00281 SSRT3631 rev.11)	Nessus	HP-UX Local Security Checks	2005/2/16	2021/1/11	critical
26133	HP-UX PHNE_35483 : s700_800 11.00 sendmail(1M) 8.9.3 patch	Nessus	HP-UX Local Security Checks	2007/9/25	2021/1/11	critical
11838	Sendmail < 8.12.10 prescan() Function Remote Overflow	Nessus	SMTP problems	2003/9/17	2018/11/15	critical
15221	Debian DSA-384-1 : sendmail - buffer overflows	Nessus	Debian Local Security Checks	2004/9/29	2021/1/4	critical
26134	HP-UX PHNE_35484 : s700_800 11.11 sendmail(1M) 8.9.3 patch	Nessus	HP-UX Local Security Checks	2007/9/25	2021/1/11	critical
2043	Sendmail < 8.12.10 prescan() Function Remote Overflow	Nessus Network Monitor	SMTP Servers	2004/8/18	2019/3/6	medium

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

medium