[security-alerts] FW: [SA19342] Sendmail Signal Handling Memory Corruption Vulnerability

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> 
> TITLE:
> Sendmail Signal Handling Memory Corruption Vulnerability
> 
> SECUNIA ADVISORY ID:
> SA19342
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/19342/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> System access
> 
> WHERE:
> From remote
> 
> OPERATING SYSTEM:
> Sendmail Sentrion 1.x
> http://secunia.com/product/8865/
> 
> SOFTWARE:
> Sendmail Switch 3.x
> http://secunia.com/product/1196/
> Sendmail Switch 2.x
> http://secunia.com/product/1197/
> Sendmail Multi-Switch 3.x
> http://secunia.com/product/8871/
> Sendmail Multi-Switch 2.x
> http://secunia.com/product/8870/
> Sendmail Message Store/SAMS 2.x
> http://secunia.com/product/8869/
> Sendmail Message Store/SAMS 1.x
> http://secunia.com/product/1198/
> Sendmail Managed MTA 3.x
> http://secunia.com/product/8867/
> Sendmail Managed MTA 2.x
> http://secunia.com/product/8866/
> Sendmail 8.x
> http://secunia.com/product/145/
> Intelligent Quarantine 3.x
> http://secunia.com/product/8872/
> 
> DESCRIPTION:
> ISS X-Force has reported a vulnerability in Sendmail, which can be
> exploited by malicious people to compromise a vulnerable system.
> 
> The vulnerability is caused due to a signal handling error when
> receiving and processing mail data from clients. This can be
> exploited to corrupt memory by sending specially crafted data at
> certain time intervals.
> 
> Successful exploitation allows execution of arbitrary code with the
> privileges of the sendmail server daemon.
> 
> The vulnerability has been reported in the following products:
> * Sendmail 8.13.5 and prior
> * Sendmail 8.12.11 and prior
> * Sendmail Sentrion 1.1
> * Sendmail Switch 2.x, 3.0.x, and 3.1.x (Solaris, Linux, AIX, and
> HP-UX)
> * Sendmail Managed MTA 2.x, 3.0.x, and 3.1.x (Solaris, Linux, AIX,
> and HP-UX)
> * Sendmail Multi-Switch 2.x, 3.0.x, and 3.1.x (Solaris, Linux, AIX,
> and HP-UX)
> * Sendmail Message Store/SAMS 1.2.x, 2.0.x, 2.1.x, and 2.2.x
> (Solaris, Linux, AIX, and HP-UX)
> * Intelligent Quarantine 3.0 (Solaris or Linux)
> 
> SOLUTION:
> Update to version 8.13.6 or apply patch.
> 
> Patch for version 8.13.5:
> ftp://ftp.sendmail.org/pub/sendmail/8.13.5.p0
> 
> Patch for version 8.12.11:
> ftp://ftp.sendmail.org/pub/sendmail/8.12.11.p0
> 
> Users of the commercial products should see the patch matrix in the
> vendor advisory for details.
> 
> PROVIDED AND/OR DISCOVERED BY:
> Mark Dowd, ISS X-Force.
> 
> ORIGINAL ADVISORY:
> ISS X-Force:
> http://xforce.iss.net/xforce/alerts/id/216
> 
> Sendmail.org:
> http://www.sendmail.org/8.13.6.html
> 
> Sendmail.com:
> http://www.sendmail.com/company/advisory/
> 
> OTHER REFERENCES:
> US-CERT VU#834865:
> http://www.kb.cert.org/vuls/id/834865
> 
>