CVE-2009-1490: Buffer Overflow
Published May 5, 2009
·Updated
Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.
Affected Software
60 affected components
Sendmail Sendmail<=8.13.1.2
Sendmail Sendmail=2.6
Sendmail Sendmail=2.6
Sendmail Sendmail=2.6.1
Sendmail Sendmail=2.6.1
Sendmail Sendmail=2.6.2
Sendmail Sendmail=3.0
Sendmail Sendmail=3.0
Sendmail Sendmail=3.0.1
Sendmail Sendmail=3.0.1
Sendmail Sendmail=3.0.2
Sendmail Sendmail=3.0.2
Sendmail Sendmail=3.0.3
Sendmail Sendmail=4.1
Sendmail Sendmail=4.55
Sendmail Sendmail=5
Sendmail Sendmail=5.59
Sendmail Sendmail=5.61
Sendmail Sendmail=5.65
Sendmail Sendmail=8.6.7
Sendmail Sendmail=8.7.6
Sendmail Sendmail=8.7.7
Sendmail Sendmail=8.7.8
Sendmail Sendmail=8.7.9
Sendmail Sendmail=8.7.10
Sendmail Sendmail=8.8.8
Sendmail Sendmail=8.9.0
Sendmail Sendmail=8.9.1
Sendmail Sendmail=8.9.2
Sendmail Sendmail=8.9.3
Sendmail Sendmail=8.10
Sendmail Sendmail=8.10.0
Sendmail Sendmail=8.10.1
Sendmail Sendmail=8.10.2
Sendmail Sendmail=8.11.0
Sendmail Sendmail=8.11.1
Sendmail Sendmail=8.11.2
Sendmail Sendmail=8.11.3
Sendmail Sendmail=8.11.4
Sendmail Sendmail=8.11.5
Sendmail Sendmail=8.11.6
Sendmail Sendmail=8.11.7
Sendmail Sendmail=8.12-beta10
Sendmail Sendmail=8.12-beta12
Sendmail Sendmail=8.12-beta16
Sendmail Sendmail=8.12-beta5
Sendmail Sendmail=8.12-beta7
Sendmail Sendmail=8.12.0
Sendmail Sendmail=8.12.1
Sendmail Sendmail=8.12.2
Sendmail Sendmail=8.12.3
Sendmail Sendmail=8.12.4
Sendmail Sendmail=8.12.5
Sendmail Sendmail=8.12.6
Sendmail Sendmail=8.12.7
Sendmail Sendmail=8.12.8
Sendmail Sendmail=8.12.9
Sendmail Sendmail=8.12.10
Sendmail Sendmail=8.12.11
Sendmail Sendmail=8.13.0
Remediation
Patch Available
Event History
May 5, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1490?
CVE-2009-1490 is categorized as a high-severity vulnerability due to the potential for remote code execution and denial of service.
2
How do I fix CVE-2009-1490?
To fix CVE-2009-1490, upgrade to Sendmail version 8.13.2 or later.
3
What software versions are affected by CVE-2009-1490?
CVE-2009-1490 affects multiple versions of Sendmail, including versions before 8.13.2.
4
What type of vulnerability is CVE-2009-1490?
CVE-2009-1490 is a heap-based buffer overflow vulnerability.
5
Can CVE-2009-1490 be exploited remotely?
Yes, CVE-2009-1490 can be exploited remotely through crafted X- headers.