March 2006

ID: 00225
Ref: 225
Date: 23 March 2006:14:02:07
Version: 1

---

Title: Vulnerability in Sendmail
Abstract: A vulnerability has been found in Sendmail which could lead to the execution of arbitrary code with Sendmail privileges.

---

A security vulnerability in certain versions of Sendmail prior to 8.13.6 may allow a remote unauthenticated attacker to execute arbitrary code with the privileges of the Sendmail process.

It is recommended that users upgrade to version 8.13.6 or apply relevant patch.

References:

Sendmail.com:
http://www.sendmail.com/company/advisory/

ISS X-Force:
http://xforce.iss.net/xforce/alerts/id/216

CVE-2006-0058
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0058