Welcome, Guest

Potential Vulnerability in Sendmail 8.12 - VU#834865

Description: Before taking any action please ensure that you are viewing the latest official version of this security advisory by referencing http://www.nortel.com/securityadvisories =========== == Source == =========== On March 22 2006 - CERT Coordination Center identified a Sendmail vulnerability as VU#834865. Link to CERT Advisory: http://www.kb.cert.org/vuls/id/834865 ============= == Overview == ============= Detailed Description: A potential vulnerability exists in sendmail that is caused by a race condition in the handling of asynchronous signals. This may allow a remote attacker to execute arbitrary code with the privileges of sendmail. Some Nortel products are potentially affected by this issue. Systems Affected: Sendmail 8.12 branch. Please refer to the Analysis section for a breakdown of potential vulnerability and impact per product.
Type: Security Advisories
Number: 2006006799, Rev 2
Status: Retired
Date: 2006-04-11


Bulletin Downloads
Title Extension File Size Language
    Potential Vulnerability in Sendmail 8.12 - VU#834865
Checksum: 503abaa953e4b3f71f6e6b502f1604bb  [MD5]
[pdf] 22759 bytes English  




Associated Products
Alteon Switched Firewall 5400, 5600, and 5700
Bulletin temp product
Business Communications Manager 1000
Business Communications Manager 50
CDMA Network Manager
CDMA Networks
Communication Server 2100
Enterprise Network Management System
Enterprise Policy Manager
Extended Peripheral Module (XPM)
IP Address Domain Manager
Media Gateway 9000
Meridian SL-100
 
Optical Multiservice Edge 6500
Optivity Policy Services for Business Policy Switch
Optivity Telephony Manager for SL-100
Policy Services application
Survivable Remote Gateway (SRG) 50
Switched Firewall 5100 Series
Switched Firewall 6000 Series
UMTS Networks
Universal Access - AAL1
Universal Access - IP
VoIP Infrastructure Solutions
Wireless Network Management System (W-NMS)