Most recent entries from all

bdu:2024-02339

EUVD-2026-10628

fkie_cve-2023-51765

sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because sendmail supports <LF>.<CR><LF> but some other popular e-mail servers do not. This is resolved in 8.18 and later versions with 'o' in srv_features.

GHSA-5rcq-25vc-g8qr

sendmail through at least 8.14.7 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages that appear to originate from the sendmail server, allowing bypass of an SPF protection mechanism. This occurs because sendmail supports <LF>.<CR><LF> but some other popular e-mail servers do not.

gsd-2023-51765

openSUSE-SU-2024:13658-1 — libmilter-doc-8.18.1-1.1 on GA media

libmilter-doc-8.18.1-1.1 on GA media

SUSE-SU-2024:0742-1 — Security update for sendmail

Security update for sendmail

UBUNTU-CVE-2023-51765

Affected: Ubuntu:14.04:LTS: sendmail, Ubuntu:16.04:LTS: sendmail, Ubuntu:18.04:LTS: sendmail, Ubuntu:20.04:LTS: sendmail, Ubuntu:22.04:LTS: sendmail

WID-SEC-W-2023-3206 — SMTP Implementierungen: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in verschiedenen SMTP Implementierungen ausnutzen, um Sicherheitsvorkehrungen zu umgehen.