CVE-2009-4565
04.01.2010, 21:30
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.Enginsight
| Vendor | Product | Version |
|---|---|---|
| sendmail | sendmail | 𝑥 ≤ 8.14.3 |
| sendmail | sendmail | 2.6 |
| sendmail | sendmail | 2.6.1 |
| sendmail | sendmail | 3.0 |
| sendmail | sendmail | 3.0.1 |
| sendmail | sendmail | 4.1 |
| sendmail | sendmail | 4.55 |
| sendmail | sendmail | 5.59 |
| sendmail | sendmail | 5.61 |
| sendmail | sendmail | 5.65 |
| sendmail | sendmail | 8.6.7 |
| sendmail | sendmail | 8.7.6 |
| sendmail | sendmail | 8.7.7 |
| sendmail | sendmail | 8.7.8 |
| sendmail | sendmail | 8.7.9 |
| sendmail | sendmail | 8.7.10 |
| sendmail | sendmail | 8.8.8 |
| sendmail | sendmail | 8.9.0 |
| sendmail | sendmail | 8.9.1 |
| sendmail | sendmail | 8.9.2 |
| sendmail | sendmail | 8.9.3 |
| sendmail | sendmail | 8.10 |
| sendmail | sendmail | 8.10.0 |
| sendmail | sendmail | 8.10.1 |
| sendmail | sendmail | 8.10.2 |
| sendmail | sendmail | 8.11.0 |
| sendmail | sendmail | 8.11.1 |
| sendmail | sendmail | 8.11.2 |
| sendmail | sendmail | 8.11.3 |
| sendmail | sendmail | 8.11.4 |
| sendmail | sendmail | 8.11.5 |
| sendmail | sendmail | 8.11.6 |
| sendmail | sendmail | 8.11.7 |
| sendmail | sendmail | 8.12:beta10 |
| sendmail | sendmail | 8.12:beta12 |
| sendmail | sendmail | 8.12:beta16 |
| sendmail | sendmail | 8.12:beta5 |
| sendmail | sendmail | 8.12:beta7 |
| sendmail | sendmail | 8.12.0 |
| sendmail | sendmail | 8.12.1 |
| sendmail | sendmail | 8.12.2 |
| sendmail | sendmail | 8.12.3 |
| sendmail | sendmail | 8.12.4 |
| sendmail | sendmail | 8.12.5 |
| sendmail | sendmail | 8.12.6 |
| sendmail | sendmail | 8.12.7 |
| sendmail | sendmail | 8.12.8 |
| sendmail | sendmail | 8.12.9 |
| sendmail | sendmail | 8.12.10 |
| sendmail | sendmail | 8.13.0 |
| sendmail | sendmail | 8.13.1 |
| sendmail | sendmail | 8.13.1.2 |
| sendmail | sendmail | 8.13.2 |
| sendmail | sendmail | 8.13.3 |
| sendmail | sendmail | 8.13.4 |
| sendmail | sendmail | 8.13.5 |
| sendmail | sendmail | 8.13.6 |
| sendmail | sendmail | 8.13.7 |
| sendmail | sendmail | 8.13.8 |
| sendmail | sendmail | 8.14.1 |
| sendmail | sendmail | 8.14.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References