Date:         Wed, 7 Apr 2010 13:29:51 -0500
Reply-To:     Troy Dawson 
Sender:       Security Errata for Scientific Linux
              
From:         Troy Dawson 
Subject:      Security ERRATA Low: sendmail on SL5.x i386/x86_64
Comments: To: "scientific-linux-errata@fnal.gov"
          

Synopsis:	Low: sendmail security and bug fix update
Issue date:	2010-03-30
CVE Names:	CVE-2006-7176 CVE-2009-4565

The configuration of sendmail in Scientific Linux was found to not 
reject the "localhost.localdomain" domain name for email messages that 
come from external hosts. This could allow remote attackers to disguise 
spoofed messages. (CVE-2006-7176)

A flaw was found in the way sendmail handled NUL characters in the
CommonName field of X.509 certificates. An attacker able to get a
carefully-crafted certificate signed by a trusted Certificate Authority
could trick sendmail into accepting it by mistake, allowing the attacker 
to perform a man-in-the-middle attack or bypass intended client 
certificate authentication. (CVE-2009-4565)

Note: The CVE-2009-4565 issue only affected configurations using TLS 
with certificate verification and CommonName checking enabled, which is 
not a typical configuration.

This update also fixes the following bugs:

* sendmail was unable to parse files specified by the ServiceSwitchFile
option which used a colon as a separator. (BZ#512871)

* sendmail incorrectly returned a zero exit code when free space was 
low. (BZ#299951)

* the sendmail manual page had a blank space between the -qG option and
parameter. (BZ#250552)

* the comments in the sendmail.mc file specified the wrong path to SSL
certificates. (BZ#244012)

* the sendmail packages did not provide the MTA capability. (BZ#494408)

SL 5.x

     SRPMS:
sendmail-8.13.8-8.el5.src.rpm
     i386:
sendmail-8.13.8-8.el5.i386.rpm
sendmail-cf-8.13.8-8.el5.i386.rpm
sendmail-devel-8.13.8-8.el5.i386.rpm
sendmail-doc-8.13.8-8.el5.i386.rpm
     x86_64:
sendmail-8.13.8-8.el5.x86_64.rpm
sendmail-cf-8.13.8-8.el5.x86_64.rpm
sendmail-devel-8.13.8-8.el5.i386.rpm
sendmail-devel-8.13.8-8.el5.x86_64.rpm
sendmail-doc-8.13.8-8.el5.x86_64.rpm

-Connie Sieh
-Troy Dawson

SciLinux: CVE-2006-7176 Low: sendmail SL5.x i386/x86_64

Low: sendmail security and bug fix update

Summary

come from external hosts. This could allow remote attackers to disguisespoofed messages. (CVE-2006-7176)A flaw was found in the way sendmail handled NUL characters in theCommonName field of X.509 certificates. An attacker able to get acarefully-crafted certificate signed by a trusted Certificate Authoritycould trick sendmail into accepting it by mistake, allowing the attackerto perform a man-in-the-middle attack or bypass intended clientcertificate authentication. (CVE-2009-4565)Note: The CVE-2009-4565 issue only affected configurations using TLSwith certificate verification and CommonName checking enabled, which isnot a typical configuration.This update also fixes the following bugs:* sendmail was unable to parse files specified by the ServiceSwitchFileoption which used a colon as a separator. (BZ#512871)* sendmail incorrectly returned a zero exit code when free space waslow. (BZ#299951)* the sendmail manual page had a blank space between the -qG option andparameter. (BZ#250552)* the comments in the sendmail.mc file specified the wrong path to SSLcertificates. (BZ#244012)* the sendmail packages did not provide the MTA capability. (BZ#494408)SL 5.xSRPMS:sendmail-8.13.8-8.el5.src.rpmi386:sendmail-8.13.8-8.el5.i386.rpmsendmail-cf-8.13.8-8.el5.i386.rpmsendmail-devel-8.13.8-8.el5.i386.rpmsendmail-doc-8.13.8-8.el5.i386.rpmx86_64:sendmail-8.13.8-8.el5.x86_64.rpmsendmail-cf-8.13.8-8.el5.x86_64.rpmsendmail-devel-8.13.8-8.el5.i386.rpmsendmail-devel-8.13.8-8.el5.x86_64.rpmsendmail-doc-8.13.8-8.el5.x86_64.rpm-Connie Sieh-Troy Dawson



Security Fixes

Severity
Issued Date: : 2010-03-30
CVE Names: CVE-2006-7176 CVE-2009-4565
The configuration of sendmail in Scientific Linux was found to not
reject the "localhost.localdomain" domain name for email messages that

Related News

Fighting Back Against Hadooken Malware by Strengthening WebLogic Security
2 - 4 min read
Cybercriminals have been relentlessly attacking the digital landscape, aiming to exploit vulnerabilities in well-known systems. One such exploit is
CISA Sounds Alarm on Newly Exploited Vulnerabilities: Is Your System at Risk?
3 - 5 min read
CISA regularly publishes updates regarding vulnerabilities that present severe threats to global cybersecurity. Recently, CISA added three
Defending Against Remote Code Execution in Google Chrome: A Critical Update
2 - 3 min read
Google Chrome, a widely used web browser, serves millions of internet users by connecting them to the online world. Unfortunately, severe
Navigating the Linux Kernel
2 - 4 min read
The Linux operating system, widely acclaimed for its robustness and security , recently received widespread media attention due to a significant
Staying a Step Ahead of Adversaries: Mitigating Chromium
2 - 4 min read
Google Chrome, one of the world's most widely used web browsers, has recently been scrutinized due to the discovery of multiple Chromium
Unmasking Cicada3301: Examining the Threat of the New Rust-Based Ransomware
2 - 4 min read
Ransomware has long been a severe threat to organizations and admins alike. Recently, cybersecurity researchers discovered a new variant called
Buffer Overflow Exploits in Linux: Origins, Impact, and Countermeasures
3 - 6 min read
Buffer overflow vulnerabilities have long been one of the biggest headaches in computer security, especially on Linux operating systems that power
8 Expert-Recommended Security Practices to Fortify Your Linux Systems
4 - 8 min read
As a Linux admin or an infosec professional, you understand how the security landscape changes due to evolving threats, newly discovered

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved