CVE-2009-1490:詳細資料

CVE-2009-1490

7.79%V4
2009-05-05
19h00 +00:00
Overflow
Network
2024-08-07
05h13 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

指標

指標 評分 嚴重程度 CVSS 向量 來源
V2 5 AV:N/AC:L/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS 是一種預測漏洞被利用可能性的評分模型。

EPSS 評分

EPSS 模型產生介於 0 到 1(0% 到 100%)之間的概率分數。分數越高,漏洞被利用的概率越大。

EPSS 百分位數

百分位數用於根據 EPSS 分數對 CVE 進行排名。例如,EPSS 評分在第 95 百分位的 CVE 比 95% 的其他 CVE 更有可能被利用。因此,百分位數用於比較某 CVE 的 EPSS 分數與其他 CVE 的相對位置。

漏洞利用資訊

Exploit Database EDB-ID : 32995

發布日期 : 2009-05-26 22h00 +00:00
作者 : Simple Nomad
EDB 已驗證 : Yes

相關產品

設定 0

Sendmail>>Sendmail >> Version 至(含) 8.13.1.2

Sendmail>>Sendmail >> Version 2.6

Sendmail>>Sendmail >> Version 2.6

Sendmail>>Sendmail >> Version 2.6.1

Sendmail>>Sendmail >> Version 2.6.1

Sendmail>>Sendmail >> Version 2.6.2

Sendmail>>Sendmail >> Version 3.0

Sendmail>>Sendmail >> Version 3.0

Sendmail>>Sendmail >> Version 3.0.1

Sendmail>>Sendmail >> Version 3.0.1

Sendmail>>Sendmail >> Version 3.0.2

Sendmail>>Sendmail >> Version 3.0.2

Sendmail>>Sendmail >> Version 3.0.3

Sendmail>>Sendmail >> Version 4.1

Sendmail>>Sendmail >> Version 4.55

Sendmail>>Sendmail >> Version 5

Sendmail>>Sendmail >> Version 5.59

Sendmail>>Sendmail >> Version 5.61

Sendmail>>Sendmail >> Version 5.65

Sendmail>>Sendmail >> Version 8.6.7

Sendmail>>Sendmail >> Version 8.7.6

Sendmail>>Sendmail >> Version 8.7.7

Sendmail>>Sendmail >> Version 8.7.8

Sendmail>>Sendmail >> Version 8.7.9

Sendmail>>Sendmail >> Version 8.7.10

Sendmail>>Sendmail >> Version 8.8.8

Sendmail>>Sendmail >> Version 8.9.0

Sendmail>>Sendmail >> Version 8.9.1

Sendmail>>Sendmail >> Version 8.9.2

Sendmail>>Sendmail >> Version 8.9.3

Sendmail>>Sendmail >> Version 8.10

Sendmail>>Sendmail >> Version 8.10.0

Sendmail>>Sendmail >> Version 8.10.1

Sendmail>>Sendmail >> Version 8.10.2

Sendmail>>Sendmail >> Version 8.11.0

Sendmail>>Sendmail >> Version 8.11.1

Sendmail>>Sendmail >> Version 8.11.2

Sendmail>>Sendmail >> Version 8.11.3

Sendmail>>Sendmail >> Version 8.11.4

Sendmail>>Sendmail >> Version 8.11.5

Sendmail>>Sendmail >> Version 8.11.6

Sendmail>>Sendmail >> Version 8.11.7

Sendmail>>Sendmail >> Version 8.12

Sendmail>>Sendmail >> Version 8.12

Sendmail>>Sendmail >> Version 8.12

Sendmail>>Sendmail >> Version 8.12

Sendmail>>Sendmail >> Version 8.12

Sendmail>>Sendmail >> Version 8.12.0

Sendmail>>Sendmail >> Version 8.12.1

Sendmail>>Sendmail >> Version 8.12.2

Sendmail>>Sendmail >> Version 8.12.3

Sendmail>>Sendmail >> Version 8.12.4

Sendmail>>Sendmail >> Version 8.12.5

Sendmail>>Sendmail >> Version 8.12.6

Sendmail>>Sendmail >> Version 8.12.7

Sendmail>>Sendmail >> Version 8.12.8

Sendmail>>Sendmail >> Version 8.12.9

Sendmail>>Sendmail >> Version 8.12.10

Sendmail>>Sendmail >> Version 8.12.11

Sendmail>>Sendmail >> Version 8.13.0

參考資料