Summary: A vulnerability has been reported in Sendmail, which can be exploited by malicious people to execute arbitrary code with the privileges of the sendmail server daemon.
Fix Type: Update the software.
Copyright: Mark Dowd, ISS X-Force
Published Date: March 23, 2006
Description: ISS X-Force has reported a vulnerability in Sendmail, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is due to a signal handling error when receiving and processing mail data from clients. This can be exploited to corrupt memory by sending specially crafted data at certain time intervals.
Successful exploitation allows execution of arbitrary code with the privileges of the sendmail server daemon.
The issue has been fixed in Sendmail version 8.13.6.