CVE-2006-4434

Publication date 29 August 2006

Last updated 17 July 2025

Ubuntu priority

Cvss 3 Severity Score

Description

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of service that is possible here is to fill up the disk with core dumps if the OS actually generates different core dumps (which is unlikely)... the bug is in the shutdown code (finis()) which leads directly to exit(3), i.e., the process would terminate anyway, no mail delivery or receiption is affected."

Status

Show unmaintained releases

Package	Ubuntu Release	Status
sendmail	9.10 karmic	Fixed 8.13.8-1
	9.04 jaunty	Fixed 8.13.8-1
	8.10 intrepid	Fixed 8.13.8-1
	8.04 LTS hardy	Fixed 8.13.8-1
	7.10 gutsy	Fixed 8.13.8-1
	7.04 feisty	Fixed 8.13.8-1
	6.10 edgy	Fixed 8.13.8-1
	6.06 LTS dapper	Ignored end of life

Severity score breakdown

CVSS version: CVSS v3.0

Base score 7.5 · High

Base metrics

Parameter	Value
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality impact	None
Integrity impact	None
Availability impact	High

Scores

Parameter	Value
Base score	7.5 · High
Exploitability score	-
Impact score	-

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

Other references

https://www.cve.org/CVERecord?id=CVE-2006-4434