VYPR

Sendmail

by Red Hat

CVEs (2)

  • CVE-2006-7176Mar 27, 2007
    risk 0.00cvss epss 0.02

    The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.

  • CVE-2003-0688Oct 20, 2003
    risk 0.00cvss epss 0.03

    The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect…