CVE-2006-1173: Medium severity Sendmail Sendmail vulnerability
Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1173?
CVE-2006-1173 has a severity level categorized as medium, indicating a moderate risk to the affected systems.
How do I fix CVE-2006-1173?
To fix CVE-2006-1173, upgrade Sendmail to version 8.13.7 or later to address the vulnerability.
What does CVE-2006-1173 affect?
CVE-2006-1173 affects several versions of Sendmail prior to 8.13.7, particularly versions 8.8.8 to 8.13.6.
What kind of attack does CVE-2006-1173 facilitate?
CVE-2006-1173 can facilitate denial of service attacks by exploiting malformed multipart MIME messages.
Is there a workaround for CVE-2006-1173 if I cannot upgrade?
A potential workaround for CVE-2006-1173 would be to implement stricter input validation for multipart MIME messages.