CVE-2006-0058

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.

Affected products

Hp-Ux, Red Hat, Sendmail

Sendmail

= 8.13.0, 8.13.1, 8.13.2, 8.13.3, 8.13.4, 8.13.5

Fix

Available

CVSS 2.0

7.6 HIGH

EPSS

28.1% (98th percentile)

NVD status

Modified

Published

2006-03-22