Vulnerability Report

CVE-2006-1173

Title: Sendmail Denial of Service (DoS)

DoS

Proof Of Concept

No public PoC currently indexed for CVE-2006-1173.

CWE Category CWE-399
Published Date Jun 07, 2006
Modified Date Jun 16, 2026
Exploit Status Not Found
Score 5.0 CVSS v2.0
Exploit Probability (EPSS)
5.17%

Vulnerability Summary

CVE-2006-1173: Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.

Impacted Vendors

Reference Links

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:17.sendmail.asc ftp://patches.sgi.com/support/free/security/advisories/20060601-01-P ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635 http://lists.suse.com/archive/suse-security-announce/2006-Jun/0006.html http://secunia.com/advisories/15779 http://secunia.com/advisories/20473 http://secunia.com/advisories/20641 http://secunia.com/advisories/20650 http://secunia.com/advisories/20651 http://secunia.com/advisories/20654 http://secunia.com/advisories/20673 http://secunia.com/advisories/20675 http://secunia.com/advisories/20679 http://secunia.com/advisories/20683 http://secunia.com/advisories/20684 http://secunia.com/advisories/20694 http://secunia.com/advisories/20726 http://secunia.com/advisories/20782 http://secunia.com/advisories/21042 http://secunia.com/advisories/21160 http://secunia.com/advisories/21327 http://secunia.com/advisories/21612 http://secunia.com/advisories/21647 http://securitytracker.com/id?1016295 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.631382 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102460-1 http://support.avaya.com/elmodocs2/security/ASA-2006-148.htm http://www-1.ibm.com/support/search.wss?rs=0&q=IY85415&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=IY85930&apar=only http://www.debian.org/security/2006/dsa-1155 http://www.f-secure.com/security/fsc-2006-5.shtml http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-18.html http://www.gentoo.org/security/en/glsa/glsa-200606-19.xml http://www.kb.cert.org/vuls/id/146718 http://www.mandriva.com/security/advisories?name=MDKSA-2006:104 http://www.openbsd.org/errata38.html#sendmail2 http://www.osvdb.org/26197 http://www.redhat.com/support/errata/RHSA-2006-0515.html http://www.securityfocus.com/archive/1/437928/100/0/threaded http://www.securityfocus.com/archive/1/438241/100/0/threaded http://www.securityfocus.com/archive/1/438330/100/0/threaded http://www.securityfocus.com/archive/1/440744/100/0/threaded http://www.securityfocus.com/archive/1/442939/100/0/threaded http://www.securityfocus.com/bid/18433 http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc http://www.vupen.com/english/advisories/2006/2189 http://www.vupen.com/english/advisories/2006/2351 http://www.vupen.com/english/advisories/2006/2388 http://www.vupen.com/english/advisories/2006/2389 http://www.vupen.com/english/advisories/2006/2390 http://www.vupen.com/english/advisories/2006/2798 http://www.vupen.com/english/advisories/2006/3135 https://exchange.xforce.ibmcloud.com/vulnerabilities/27128 https://issues.rpath.com/browse/RPL-526 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11253 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:17.sendmail.asc ftp://patches.sgi.com/support/free/security/advisories/20060601-01-P ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635 http://lists.suse.com/archive/suse-security-announce/2006-Jun/0006.html http://secunia.com/advisories/15779 http://secunia.com/advisories/20473 http://secunia.com/advisories/20641 http://secunia.com/advisories/20650 http://secunia.com/advisories/20651 http://secunia.com/advisories/20654 http://secunia.com/advisories/20673 http://secunia.com/advisories/20675 http://secunia.com/advisories/20679 http://secunia.com/advisories/20683 http://secunia.com/advisories/20684 http://secunia.com/advisories/20694 http://secunia.com/advisories/20726 http://secunia.com/advisories/20782 http://secunia.com/advisories/21042 http://secunia.com/advisories/21160 http://secunia.com/advisories/21327 http://secunia.com/advisories/21612 http://secunia.com/advisories/21647 http://securitytracker.com/id?1016295 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.631382 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102460-1 http://support.avaya.com/elmodocs2/security/ASA-2006-148.htm http://www-1.ibm.com/support/search.wss?rs=0&q=IY85415&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=IY85930&apar=only http://www.debian.org/security/2006/dsa-1155 http://www.f-secure.com/security/fsc-2006-5.shtml http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-18.html http://www.gentoo.org/security/en/glsa/glsa-200606-19.xml http://www.kb.cert.org/vuls/id/146718 http://www.mandriva.com/security/advisories?name=MDKSA-2006:104 http://www.openbsd.org/errata38.html#sendmail2 http://www.osvdb.org/26197 http://www.redhat.com/support/errata/RHSA-2006-0515.html http://www.securityfocus.com/archive/1/437928/100/0/threaded http://www.securityfocus.com/archive/1/438241/100/0/threaded http://www.securityfocus.com/archive/1/438330/100/0/threaded http://www.securityfocus.com/archive/1/440744/100/0/threaded http://www.securityfocus.com/archive/1/442939/100/0/threaded http://www.securityfocus.com/bid/18433 http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc http://www.vupen.com/english/advisories/2006/2189 http://www.vupen.com/english/advisories/2006/2351 http://www.vupen.com/english/advisories/2006/2388 http://www.vupen.com/english/advisories/2006/2389 http://www.vupen.com/english/advisories/2006/2390 http://www.vupen.com/english/advisories/2006/2798 http://www.vupen.com/english/advisories/2006/3135 https://exchange.xforce.ibmcloud.com/vulnerabilities/27128 https://issues.rpath.com/browse/RPL-526 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11253
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
5.0
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:N/I:N/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2006-1173 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected Stack

No specific products linked.