CVE-2005-2070 The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents...
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail | = 8.8.8 | No fix listed |
| sendmail | = 8.9.0 | No fix listed |
| sendmail | = 8.9.1 | No fix listed |
| sendmail | = 8.9.2 | No fix listed |
| sendmail | = 8.9.3 | No fix listed |
| sendmail | = 8.10 | No fix listed |
| sendmail | = 8.10.1 | No fix listed |
| sendmail | = 8.10.2 | No fix listed |
| sendmail | = 8.11.0 | No fix listed |
| sendmail | = 8.11.1 | No fix listed |
| sendmail | = 8.11.2 | No fix listed |
| sendmail | = 8.11.3 | No fix listed |
| sendmail | = 8.11.4 | No fix listed |
| sendmail | = 8.11.5 | No fix listed |
| sendmail | = 8.11.6 | No fix listed |
| sendmail | = 8.11.7 | No fix listed |
| sendmail | = 8.12-beta10 | No fix listed |
| sendmail | = 8.12-beta12 | No fix listed |
| sendmail | = 8.12-beta16 | No fix listed |
| sendmail | = 8.12-beta5 | No fix listed |
| sendmail | = 8.12-beta7 | No fix listed |
| sendmail | = 8.12.0 | No fix listed |
| sendmail | = 8.12.1 | No fix listed |
| sendmail | = 8.12.2 | No fix listed |
| sendmail | = 8.12.3 | No fix listed |
Show 11 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail | = 8.12.4 | No fix listed |
| sendmail | = 8.12.5 | No fix listed |
| sendmail | = 8.12.6 | No fix listed |
| sendmail | = 8.12.7 | No fix listed |
| sendmail | = 8.12.8 | No fix listed |
| sendmail | = 8.12.9 | No fix listed |
| sendmail | = 8.12.10 | No fix listed |
| sendmail | = 8.12.11 | No fix listed |
| debian/clamav(Debian:12) | < 0.86.1 | 0.86.1 |
| debian/clamav(Debian:13) | < 0.86.1 | 0.86.1 |
| debian/clamav(Debian:14) | < 0.86.1 | 0.86.1 |
References
- 20050623 long sendmail timeouts let attacker prevent milter quiesce mailing-list vendor-advisory
- DSA-737 vendor-advisory
- SUSE-SA:2005:038 vendor-advisory
- 14047 vdb-entry
- Debian Security Tracker CVE-2005-2070 vendor-advisory
- bugs.debian.org issue-tracking