CVE-2006-0058: sendmail

CVSS: 7.6v2.0HighModified

AliasesRHSA-2006:0264DEBIAN-CVE-2006-0058DSA-1015-1

Published 22-03-2006Last modified 07-08-2024

Some data may be incomplete

5 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2006-0058 is a high (CVSS 7.6) vulnerability in sendmail. EPSS estimates a 28.73% chance of exploitation in the next 30 days, higher than 98.1% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

46/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.6/10

010

High · v2.0 (NVD)

EPSS score

28.73%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1exploit-database

Timeline

22-03-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.

CVSS metrics

1 score · 1 source · 1 version

v2.07.6

EPSS trend

Probability

28.73%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 28.73% on 18-09-2026

18-09-202618-10-2026

EPSS score

28.73%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoslinuxVerified
Sendmail 8.13.5 - Remote Signal Handling (PoC)
Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat5 products

sendmail< 0:8.12.11-4.RHEL3.4 | < 0:8.13.1-3.RHEL4.3
sendmail-cf< 0:8.12.11-4.RHEL3.4 | < 0:8.13.1-3.RHEL4.3
sendmail-debuginfo< 0:8.12.11-4.RHEL3.4 | < 0:8.13.1-3.RHEL4.3
sendmail-devel< 0:8.12.11-4.RHEL3.4 | < 0:8.13.1-3.RHEL4.3
sendmail-doc< 0:8.12.11-4.RHEL3.4 | < 0:8.13.1-3.RHEL4.3

Debian1 product

sendmail< 8.13.6-1 | < 8.12.3-7.2 | < 8.13.4-3sarge1

Sendmail1 product

sendmail8.13.0 | 8.13.1 | 8.13.2 | 8.13.3 | 8.13.4 | 8.13.5

3 vendors · 7 products

References

78 links

www.vupen.com/english/advisories/2006/1529VDB EntryX Refsource VUPEN
itrc.hp.com/service/cki/docDisplay.do?docId=c00692635Vendor AdvisoryX Refsource HP
secunia.com/advisories/19450Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2006/dsa-1015Vendor AdvisoryX Refsource DEBIAN
www.mandriva.com/security/advisories?name=MDKSA-2006:058Vendor AdvisoryX Refsource MANDRIVA
www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.htmlX Refsource CONFIRM
www.openbsd.org/errata38.htmlVendor AdvisoryX Refsource OPENBSD
www.kb.cert.org/vuls/id/834865Third Party AdvisoryX Refsource CERT VNUS Government ResourceARTICLE
secunia.com/advisories/19342Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/1049VDB EntryX Refsource VUPEN

Show all 78 references

secunia.com/advisories/19774Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11074VDB EntrySignatureX Refsource OVAL
sunsolve.sun.com/search/document.do?assetkey=1-66-200494-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/19404Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19367Third Party AdvisoryX Refsource SECUNIA
www.openpkg.org/security/advisories/OpenPKG-SA-2006.007-sendmail.htmlVendor AdvisoryX Refsource OPENPKG
www.vupen.com/english/advisories/2006/1051VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/428536/100/0/threadedMailing ListX Refsource BUGTRAQ
www.f-secure.com/security/fsc-2006-2.shtmlX Refsource CONFIRM
securityreason.com/securityalert/743Third Party AdvisoryX Refsource SREASON
securitytracker.com/id?1015801VDB EntryX Refsource SECTRACK
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555Vendor AdvisoryX Refsource HP
secunia.com/advisories/19363Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/24584VDB EntryX Refsource XF
www.us-cert.gov/cas/techalerts/TA06-081A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/20723Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/20243Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19407Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/2189VDB EntryX Refsource VUPEN
www.redhat.com/archives/fedora-announce-list/2006-April/msg00017.htmlVendor AdvisoryX Refsource FEDORA
www.iss.net/threats/216.htmlThird Party AdvisoryX Refsource ISS
secunia.com/advisories/19466Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19368Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2006-078.htmX Refsource CONFIRM
www.ciac.org/ciac/bulletins/q-151.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIAC
support.avaya.com/elmodocs2/security/ASA-2006-074.htmX Refsource CONFIRM
secunia.com/advisories/19345Third Party AdvisoryX Refsource SECUNIA
securityreason.com/securityalert/612Third Party AdvisoryX Refsource SREASON
www.redhat.com/archives/fedora-announce-list/2006-April/msg00018.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/19346Third Party AdvisoryX Refsource SECUNIA
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.619600Vendor AdvisoryX Refsource SLACKWARE
www-1.ibm.com/support/search.wss?rs=0&q=IY82992&apar=onlyVendor AdvisoryX Refsource AIXAPAR
www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751X Refsource CONFIRM
www.gentoo.org/security/en/glsa/glsa-200603-21.xmlVendor AdvisoryX Refsource GENTOO
www-1.ibm.com/support/search.wss?rs=0&q=IY82994&apar=onlyVendor AdvisoryX Refsource AIXAPAR
www-1.ibm.com/support/search.wss?rs=0&q=IY82993&apar=onlyVendor AdvisoryX Refsource AIXAPAR
www.vupen.com/english/advisories/2006/1068VDB EntryX Refsource VUPEN
www.redhat.com/support/errata/RHSA-2006-0265.htmlVendor AdvisoryX Refsource REDHATPatch
www.vupen.com/english/advisories/2006/2490VDB EntryX Refsource VUPEN
www.vupen.com/english/advisories/2006/1072VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/428656/100/0/threadedVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/19360Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19532Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-102324-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/19361Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19676Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19356Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_17_sendmail.htmlVendor AdvisoryX Refsource SUSE
www.osvdb.org/24037VDB EntryX Refsource OSVDB
secunia.com/advisories/19349Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-102262-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/19394Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/1139VDB EntryX Refsource VUPEN
www.vupen.com/english/advisories/2006/1157VDB EntryX Refsource VUPEN
secunia.com/advisories/19533Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1689VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/bid/17192VDB EntryX Refsource BID
www.redhat.com/support/errata/RHSA-2006-0264.htmlVendor AdvisoryX Refsource REDHATPatch
www.sendmail.com/company/advisory/index.shtmlX Refsource CONFIRM
access.redhat.com/errata/RHSA-2006:0264Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=184465REPORT
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0264.jsonAdvisory
access.redhat.com/security/cve/CVE-2006-0058REPORT
bugzilla.redhat.com/show_bug.cgi?id=1617872REPORT
www.cve.org/CVERecord?id=CVE-2006-0058Advisory
nvd.nist.gov/vuln/detail/CVE-2006-0058Advisory
security-tracker.debian.org/tracker/CVE-2006-0058Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities