Advanced

Major vulnerability in Sendmail 8.13.5 and earlier versions

Posted by dave on · 3 comments
Sendmail.com		Mail this story
Print this story

Sendmail, Inc. has recently become aware of a security vulnerability in certain versions of sendmail Mail Transfer Agent (MTA) and UNIX and Linux products that contain it. Sendmail was notified by security researchers at ISS that, under some specific timing conditions, this vulnerability may permit a specifically crafted attack to take over the sendmail MTA process, allowing remote attackers to execute commands and run arbitrary programs on the system running the MTA, affecting email delivery, or tampering with other programs and data on this system.

Full Story

  Nav
» Read more about: Story Type: Announcements

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (3)

I use postfix because

tadelste ·
Has sendmail.com allowed an upgrade in the last eight years?

I'm glad I use Postfix instead

phil ·
I used to run Sendmail, and even manually hacked my own sendmail.cf files. Later I tried Qmail but I just didn't get into the religion. Postfix was my next try and that was several years ago. I'm still using it.
tuxtom ·
I've walked the exact same road, phil.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post