CVE-2009-4565 sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP ser...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail | <= 8.14.3 | No fix listed |
| sendmail | = 2.6 | No fix listed |
| sendmail | = 2.6.1 | No fix listed |
| sendmail | = 3.0 | No fix listed |
| sendmail | = 3.0.1 | No fix listed |
| sendmail | = 4.1 | No fix listed |
| sendmail | = 4.55 | No fix listed |
| sendmail | = 5 | No fix listed |
| sendmail | = 5.59 | No fix listed |
| sendmail | = 5.61 | No fix listed |
| sendmail | = 5.65 | No fix listed |
| sendmail | = 8.6.7 | No fix listed |
| sendmail | = 8.7.6 | No fix listed |
| sendmail | = 8.7.7 | No fix listed |
| sendmail | = 8.7.8 | No fix listed |
| sendmail | = 8.7.9 | No fix listed |
| sendmail | = 8.7.10 | No fix listed |
| sendmail | = 8.8.8 | No fix listed |
| sendmail | = 8.9.0 | No fix listed |
| sendmail | = 8.9.1 | No fix listed |
| sendmail | = 8.9.2 | No fix listed |
| sendmail | = 8.9.3 | No fix listed |
| sendmail | = 8.10 | No fix listed |
| sendmail | = 8.10.0 | No fix listed |
| sendmail | = 8.10.1 | No fix listed |
Show 40 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail | = 8.10.2 | No fix listed |
| sendmail | = 8.11.0 | No fix listed |
| sendmail | = 8.11.1 | No fix listed |
| sendmail | = 8.11.2 | No fix listed |
| sendmail | = 8.11.3 | No fix listed |
| sendmail | = 8.11.4 | No fix listed |
| sendmail | = 8.11.5 | No fix listed |
| sendmail | = 8.11.6 | No fix listed |
| sendmail | = 8.11.7 | No fix listed |
| sendmail | = 8.12-beta10 | No fix listed |
| sendmail | = 8.12-beta12 | No fix listed |
| sendmail | = 8.12-beta16 | No fix listed |
| sendmail | = 8.12-beta5 | No fix listed |
| sendmail | = 8.12-beta7 | No fix listed |
| sendmail | = 8.12.0 | No fix listed |
| sendmail | = 8.12.1 | No fix listed |
| sendmail | = 8.12.2 | No fix listed |
| sendmail | = 8.12.3 | No fix listed |
| sendmail | = 8.12.4 | No fix listed |
| sendmail | = 8.12.5 | No fix listed |
| sendmail | = 8.12.6 | No fix listed |
| sendmail | = 8.12.7 | No fix listed |
| sendmail | = 8.12.8 | No fix listed |
| sendmail | = 8.12.9 | No fix listed |
| sendmail | = 8.12.10 | No fix listed |
| sendmail | = 8.13.0 | No fix listed |
| sendmail | = 8.13.1 | No fix listed |
| sendmail | = 8.13.1.2 | No fix listed |
| sendmail | = 8.13.2 | No fix listed |
| sendmail | = 8.13.3 | No fix listed |
| sendmail | = 8.13.4 | No fix listed |
| sendmail | = 8.13.5 | No fix listed |
| sendmail | = 8.13.6 | No fix listed |
| sendmail | = 8.13.7 | No fix listed |
| sendmail | = 8.13.8 | No fix listed |
| sendmail | = 8.14.1 | No fix listed |
| sendmail | = 8.14.2 | No fix listed |
| debian/sendmail(Debian:12) | < 8.14.3-9.1 | 8.14.3-9.1 |
| debian/sendmail(Debian:13) | < 8.14.3-9.1 | 8.14.3-9.1 |
| debian/sendmail(Debian:14) | < 8.14.3-9.1 | 8.14.3-9.1 |
References
- SUSE-SR:2010:006 vendor-advisory
- HPSBUX02508 vendor-advisory
- 37998 third-party-advisory vendor-advisory
- 38314 third-party-advisory
- 38915 third-party-advisory
- 39088 third-party-advisory
- 40109 third-party-advisory
- 43366 third-party-advisory
- GLSA-201206-30 vendor-advisory
- 1021797 vendor-advisory
- DSA-1985 vendor-advisory
- RHSA-2011:0262 vendor-advisory
- 37543 vdb-entry
- www.sendmail.org patch
- ADV-2009-3661 patch vdb-entry vendor-advisory
- ADV-2010-0719 vdb-entry
- ADV-2010-1386 vdb-entry
- ADV-2011-0415 vdb-entry
- oval:org.mitre.oval:def:10255 signature vdb-entry
- oval:org.mitre.oval:def:11822 signature vdb-entry
- Debian Security Tracker CVE-2009-4565 vendor-advisory
- bugs.debian.org issue-tracking