| CNNVD-ID编号 | CNNVD-200608-452 |
| CVE编号 | CVE-2006-4434 |
| 发布时间 | 2006-08-28 |
| 更新时间 | 2006-09-05 |
| 漏洞类型 | 资源管理错误 |
| 漏洞来源 | This issue was disclosed in the referenced OpenBSD advisory. |
| 危险等级 | 中危 |
| 威胁类型 | 远程 |
| 厂 商 | sendmail |
Sendmail 8.13.8之前版本中存在释放后使用(use-after-free)漏洞，远程攻击者可借助使用一个超长\"标题行\"导致以前释放的变量被引用，从而触发拒绝服务攻击(崩溃)。注：原开发人员对此问题的严重性存在争议，表明唯一的拒绝服务攻击可能在于，如果操作系统产生了不同的内存转储(这种情况不太可能发生)，则内存转储会填满磁盘空间。此问题存在于直接导致exit(3)的关闭(shutdown)代码 (finis()) 中，也就是终止进程，邮件发送或接收不会受到影响。
目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：
OpenBSD OpenBSD 3.9
OpenBSD 005_sendmail3.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/005_sendmail3.pat ch
Turbolinux Appliance Server 2.0
Turbolinux sendmail-8.13.1-9.i586.rpm
Turbolinux Appliance Server 2.0
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/
Turbolinux sendmail-cf-8.13.1-9.i586.rpm
Turbolinux Appliance Server 2.0
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/
OpenBSD OpenBSD 3.8
OpenBSD 010_sendmail3.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/010_sendmail3.pat ch
Turbolinux Appliance Server 1.0 Hosting Edition
Turbolinux sendmail-8.12.10-9.i586.rpm
Turbolinux Appliance Server 1.0 Hosting Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/
Turbolinux sendmail-cf-8.12.10-9.i586.rpm
Turbolinux Appliance Server 1.0 Hosting Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/
Turbolinux sendmail-doc-8.12.10-9.i586.rpm
Turbolinux Appliance Server 1.0 Hosting Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/
Turbolinux Appliance Server 1.0 Workgroup Edition
Turbolinux sendmail-8.12.10-9.i586.rpm
Turbolinux Appliance Server 1.0 Workgroup Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/
Turbolinux sendmail-cf-8.12.10-9.i586.rpm
Turbolinux Appliance Server 1.0 Workgroup Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/
Turbolinux sendmail-doc-8.12.10-9.i586.rpm
Turbolinux Appliance Server 1.0 Workgroup Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/
Turbolinux Turbolinux Server 10.0
Turbolinux sendmail-8.13.1-9.i586.rpm
Turbolinux 10 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/misc/RPMS/sendmail-8.13.1-9.i586.rpm
Turbolinux sendmail-8.13.1-9.x86_64.rpm
Turbolinux 10 Server x64 Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/misc/RPMS/sendmail-8.13.1-9.x86_64.rpm
Turbolinux sendmail-cf-8.13.1-9.i586.rpm
Turbolinux 10 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/misc/RPMS/sendmail-cf-8.13.1-9.i586.rpm
Turbolinux sendmail-cf-8.13.1-9.x86_64.rpm
Turbolinux 10 Server x64 Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/misc/RPMS/sendmail-cf-8.13.1-9.x86_64.rpm
Turbolinux sendmail-devel-8.13.1-9.i586.rpm
Turbolinux 10 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/misc/RPMS/sendmail-devel-8.13.1-9.i586.rpm
Turbolinux sendmail-devel-8.13.1-9.x86_64.rpm
Turbolinux 10 Server x64 Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/misc/RPMS/sendmail-devel-8.13.1-9.x86_64.rpm
Turbolinux sendmail-doc-8.13.1-9.i586.rpm
Turbolinux 10 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/misc/RPMS/sendmail-doc-8.13.1-9.i586.rpm
Turbolinux sendmail-doc-8.13.1-9.x86_64.rpm
Turbolinux 10 Server x64 Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/misc/RPMS/sendmail-doc-8.13.1-9.x86_64.rpm
Turbolinux sendmail-vacation-8.13.1-9.i586.rpm
Turbolinux 10 Server
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/misc/RPMS/sendmail-vacation-8.13.1-9.i586.rpm
Turbolinux sendmail-vacation-8.13.1-9.x86_64.rpm
Turbolinux 10 Server x64 Edition
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/x64/Server/10/upd ates/misc/RPMS/sendmail-vacation-8.13.1-9.x86_64.rpm
来源: www.sendmail.org
来源: BID
名称: 19714
来源: SECTRACK
名称: 1016753
来源: SECUNIA
名称: 21641
来源: SECUNIA
名称: 21637
来源: OPENBSD
名称: [3.8] 20060825 010: SECURITY FIX: August 25, 2006
来源: OPENBSD
名称: [3.9] 20060825 005: SECURITY FIX: August 25, 2006
来源: DEBIAN
名称: DSA-1164
来源: VIM
名称: 20060829 Sendmail vendor dispute - CVE-2006-4434 (fwd)
链接：http://www.attrition.org/pipermail/vim/2006-August/000999.html
来源: SECUNIA
名称: 21700
来源: SECUNIA
名称: 21696
来源: MANDRIVA
名称: MDKSA-2006:156
链接：http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:156
来源: OSVDB
名称: 28193
来源: SUSE
名称: SUSE-SR:2006:021
链接：http://www.novell.com/linux/security/advisories/2006_21_sr.html
来源: MANDRIVA
名称: MDKSA-2006:156
链接：http://www.mandriva.com/security/advisories?name=MDKSA-2006:156
来源: VUPEN
名称: ADV-2006-3994
来源: VUPEN
名称: ADV-2006-3393
来源: SUNALERT
名称: 102664
链接：http://sunsolve.sun.com/search/document.do?assetkey=1-26-102664-1
来源: SECUNIA
名称: 22369