CVE-2009-4565
First published: Mon Jan 04 2010(Updated: )
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sendmail Sendmail | =8.9.2 | |
| Sendmail Sendmail | =8.11.4 | |
| Sendmail Sendmail | =8.13.4 | |
| Sendmail Sendmail | =8.8.8 | |
| Sendmail Sendmail | =8.11.7 | |
| Sendmail Sendmail | =8.13.1 | |
| Sendmail Sendmail | =8.12-beta16 | |
| Sendmail Sendmail | =5 | |
| Sendmail Sendmail | =2.6 | |
| Sendmail Sendmail | =8.11.1 | |
| Sendmail Sendmail | =8.11.0 | |
| Sendmail Sendmail | =8.13.5 | |
| Sendmail Sendmail | =8.12.3 | |
| Sendmail Sendmail | =8.13.8 | |
| Sendmail Sendmail | =8.11.3 | |
| Sendmail Sendmail | =2.6.1 | |
| Sendmail Sendmail | =8.12.8 | |
| Sendmail Sendmail | =8.6.7 | |
| Sendmail Sendmail | =8.7.9 | |
| Sendmail Sendmail | =5.59 | |
| Sendmail Sendmail | =5.61 | |
| Sendmail Sendmail | =8.12.9 | |
| Sendmail Sendmail | =8.9.1 | |
| Sendmail Sendmail | =8.10.2 | |
| Sendmail Sendmail | =8.12.4 | |
| Sendmail Sendmail | =8.12-beta12 | |
| Sendmail Sendmail | =8.13.6 | |
| Sendmail Sendmail | =8.9.0 | |
| Sendmail Sendmail | =8.14.2 | |
| Sendmail Sendmail | =8.10.1 | |
| Sendmail Sendmail | =8.7.10 | |
| Sendmail Sendmail | =8.12.1 | |
| Sendmail Sendmail | =8.13.7 | |
| Sendmail Sendmail | =5.65 | |
| Sendmail Sendmail | =4.55 | |
| Sendmail Sendmail | =8.11.6 | |
| Sendmail Sendmail | =8.12.5 | |
| Sendmail Sendmail | =8.7.8 | |
| Sendmail Sendmail | =8.13.1.2 | |
| Sendmail Sendmail | =8.10 | |
| Sendmail Sendmail | =8.12-beta7 | |
| Sendmail Sendmail | <=8.14.3 | |
| Sendmail Sendmail | =8.9.3 | |
| Sendmail Sendmail | =8.12.0 | |
| Sendmail Sendmail | =4.1 | |
| Sendmail Sendmail | =8.14.1 | |
| Sendmail Sendmail | =8.10.0 | |
| Sendmail Sendmail | =8.12-beta5 | |
| Sendmail Sendmail | =8.12.6 | |
| Sendmail Sendmail | =8.7.6 | |
| Sendmail Sendmail | =8.12-beta10 | |
| Sendmail Sendmail | =8.12.2 | |
| Sendmail Sendmail | =3.0 | |
| Sendmail Sendmail | =8.11.2 | |
| Sendmail Sendmail | =3.0.1 | |
| Sendmail Sendmail | =8.13.0 | |
| Sendmail Sendmail | =8.12.7 | |
| Sendmail Sendmail | =8.7.7 | |
| Sendmail Sendmail | =8.12.10 | |
| Sendmail Sendmail | =8.11.5 | |
| Sendmail Sendmail | =8.13.3 | |
| Sendmail Sendmail | =8.13.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/37543
- http://secunia.com/advisories/37998
- http://www.vupen.com/english/advisories/2009/3661
- http://www.sendmail.org/releases/8.14.4
- http://www.debian.org/security/2010/dsa-1985
- http://secunia.com/advisories/38314
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
- http://secunia.com/advisories/38915
- http://marc.info/?l=bugtraq&m=126953289726317&w=2
- http://secunia.com/advisories/39088
- http://secunia.com/advisories/40109
- http://www.vupen.com/english/advisories/2010/1386
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021797.1-1
- http://www.vupen.com/english/advisories/2010/0719
- http://www.redhat.com/support/errata/RHSA-2011-0262.html
- http://secunia.com/advisories/43366
- http://www.vupen.com/english/advisories/2011/0415
- http://security.gentoo.org/glsa/glsa-201206-30.xml
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11822
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10255
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sendmail
- canonical/sendmail sendmail
- version/sendmail sendmail/8.9.2
- version/sendmail sendmail/8.11.4
- version/sendmail sendmail/8.13.4
- version/sendmail sendmail/8.8.8
- version/sendmail sendmail/8.11.7
- version/sendmail sendmail/8.13.1
- version/sendmail sendmail/8.12-beta16
- version/sendmail sendmail/5
- version/sendmail sendmail/2.6
- version/sendmail sendmail/8.11.1
- version/sendmail sendmail/8.11.0
- version/sendmail sendmail/8.13.5
- version/sendmail sendmail/8.12.3
- version/sendmail sendmail/8.13.8
- version/sendmail sendmail/8.11.3
- version/sendmail sendmail/2.6.1
- version/sendmail sendmail/8.12.8
- version/sendmail sendmail/8.6.7
- version/sendmail sendmail/8.7.9
- version/sendmail sendmail/5.59
- version/sendmail sendmail/5.61
- version/sendmail sendmail/8.12.9
- version/sendmail sendmail/8.9.1
- version/sendmail sendmail/8.10.2
- version/sendmail sendmail/8.12.4
- version/sendmail sendmail/8.12-beta12
- version/sendmail sendmail/8.13.6
- version/sendmail sendmail/8.9.0
- version/sendmail sendmail/8.14.2
- version/sendmail sendmail/8.10.1
- version/sendmail sendmail/8.7.10
- version/sendmail sendmail/8.12.1
- version/sendmail sendmail/8.13.7
- version/sendmail sendmail/5.65
- version/sendmail sendmail/4.55
- version/sendmail sendmail/8.11.6
- version/sendmail sendmail/8.12.5
- version/sendmail sendmail/8.7.8
- version/sendmail sendmail/8.13.1.2
- version/sendmail sendmail/8.10
- version/sendmail sendmail/8.12-beta7
- version/sendmail sendmail/8.14.3
- version/sendmail sendmail/8.9.3
- version/sendmail sendmail/8.12.0
- version/sendmail sendmail/4.1
- version/sendmail sendmail/8.14.1
- version/sendmail sendmail/8.10.0
- version/sendmail sendmail/8.12-beta5
- version/sendmail sendmail/8.12.6
- version/sendmail sendmail/8.7.6
- version/sendmail sendmail/8.12-beta10
- version/sendmail sendmail/8.12.2
- version/sendmail sendmail/3.0
- version/sendmail sendmail/8.11.2
- version/sendmail sendmail/3.0.1
- version/sendmail sendmail/8.13.0
- version/sendmail sendmail/8.12.7
- version/sendmail sendmail/8.7.7
- version/sendmail sendmail/8.12.10
- version/sendmail sendmail/8.11.5
- version/sendmail sendmail/8.13.3
- version/sendmail sendmail/8.13.2