SMTP: Header Line Overflow

This signature detects SMTP transactions with large header lines. Malicious users can attempt to crash the SMTP service by sending large header lines in an e-mail message.

Extended Description

Sendmail is prone to a remote code-execution vulnerability. Remote attackers may leverage this issue to execute arbitrary code with the privileges of the application, which typically runs as superuser. Versions prior to Sendmail 8.13.6 are vulnerable to this issue.

Affected Products

Avaya communication_manager_server_s8500,Hp tru64

References

BugTraq: 17192

CVE: CVE-2006-0058

URL: http://www.gentoo.org/security/en/glsa/glsa-200603-21.xml

Short Name

SMTP:OVERFLOW:HEADER-LINE-OF

Severity

Major

Recommended

False

Recommended Action

None

SMTP: Header Line Overflow

Extended Description

Affected Products

References

Found a potential security threat?