CVE-2006-0058

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.

CVSS v2.0 NVD

7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

28.73% chance of exploitation in the next 30 days, 98th percentile

Published

2006-03-22

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/2051

Security advisories

• http://www.redhat.com/support/errata/RHSA-2006-0264.html
• http://www.redhat.com/support/errata/RHSA-2006-0265.html
• http://www.kb.cert.org/vuls/id/834865
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:058
• http://www.securityfocus.com/bid/17192

References

• CVE Record
• NVD entry