Security-Alerts mailing list archive (security-alerts@yandex-team.ru)
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [security-alerts] FW: [SA21637] Sendmail Long Header Denial of Service Vulnerability
> -----Original Message-----
> From: eugeny gladkih [mailto:john@xxxxxxxxx]
> Sent: Tuesday, August 29, 2006 11:50 AM
> To: Kazennov, Vladimir
> Cc: security-alerts@xxxxxxxxxxxxxx
> Subject: Re: [security-alerts] FW: [SA21637] Sendmail Long
> Header Denial of Service Vulnerability
>
> >>>>> "KV" == Kazennov, Vladimir
> <Vladimir.Kazennov@xxxxxxxxxx> writes:
>
> >> TITLE:
> >> Sendmail Long Header Denial of Service Vulnerability
> >>
>
> ÕÖÅ ÄÁÖÅ ÎÅ ÓÍÅÛÎÏ...
ãÉÔÉÒÕÀ ÐÅÒ×ÏÉÓÔÏÞÎÉË:
"A potential denial of service problem has been found in sendmail. A message
with really long header lines could trigger a use-after-free bug causing
sendmail to crash."
Index: gnu/usr.sbin/sendmail/sendmail/main.c
===================================================================
RCS file: /cvs/src/gnu/usr.sbin/sendmail/sendmail/main.c,v
retrieving revision 1.21
retrieving revision 1.21.8.1
diff -u -p -r1.21 -r1.21.8.1
--- gnu/usr.sbin/sendmail/sendmail/main.c 24 Jun 2004 03:59:27 -0000
1.21
+++ gnu/usr.sbin/sendmail/sendmail/main.c 8 Aug 2006 20:20:42 -0000
1.21.8.1
@@ -2893,6 +2893,7 @@ finis(drop, cleanup, exitstat)
dropenvelope(CurEnv, true, false);
sm_rpool_free(CurEnv->e_rpool);
CurEnv->e_rpool = NULL;
+ CurEnv->e_to = NULL;
}
else
poststats(StatFile);
>
> --
> Yours sincerely, Eugeny.
> Doctor Web, Ltd.
>
|
