p PatchFirst

CVE-2009-1490

CVE-2009-1490

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.

EPSS 12.6% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • sendmail Debian:12

    Affected ranges
    • ECOSYSTEM: < 8.13.2-0

    Update to 8.13.2-0

  • sendmail Debian:13

    Affected ranges
    • ECOSYSTEM: < 8.13.2-0

    Update to 8.13.2-0

  • sendmail Debian:14

    Affected ranges
    • ECOSYSTEM: < 8.13.2-0

    Update to 8.13.2-0

Original sources

Check your server →