logo

Database

Lack of data validation In sendmail

Description

Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2009-14902. NVD-2009-14903. OSV-DEBIAN-2009-14904. OSV-2009-14905. SECURITY-TRACKER-CVE-2009-1490

References

1. https://www.exploit-db.com/exploits/32995

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.