DSA-257-1 sendmail -- remote exploit

Debian Security Advisory

DSA-257-1 sendmail -- remote exploit

Date Reported:

04 Mar 2003

Affected Packages:

sendmail, sendmail-wide

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2002-1337.
CERT's vulnerabilities, advisories and incident notes: CA-2003-07, VU#398025.

More information:

Mark Dowd of ISS X-Force found a bug in the header parsing routines of sendmail: it could overflow a buffer overflow when encountering addresses with very long comments. Since sendmail also parses headers when forwarding emails this vulnerability can hit mail-servers which do not deliver the email as well.

This has been fixed in upstream release 8.12.8, version 8.12.3-5 of the package for Debian GNU/Linux 3.0/woody and version 8.9.3-25 of the package for Debian GNU/Linux 2.2/potato.

DSA-257-2: Updated sendmail-wide packages are available in package version 8.9.3+3.2W-24 for Debian 2.2 (potato) and version 8.12.3+3.5Wbeta-5.2 for Debian 3.0 (woody).

Fixed in:

Debian GNU/Linux 2.2 (potato)

Source:

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3-25.diff.gz

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3-25.dsc

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3.orig.tar.gz

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.9.3+3.2W-24.dsc

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.9.3+3.2W-24.tar.gz

alpha (DEC Alpha):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3-25_alpha.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.9.3+3.2W-24_alpha.deb

arm (ARM):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3-25_arm.deb

--

i386 (Intel IA-32):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3-25_i386.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.9.3+3.2W-24_i386.deb

m68k (Motorola 680x0):

--

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.9.3+3.2W-24_m68k.deb

powerpc (PowerPC):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3-25_powerpc.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.9.3+3.2W-24_powerpc.deb

sparc (Sun SPARC/UltraSPARC):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3-25_sparc.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.9.3+3.2W-24_sparc.deb

Debian GNU/Linux 3.0 (woody)

Source:

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3-5.diff.gz

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3-5.dsc

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3.orig.tar.gz

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2.dsc

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta.orig.tar.gz

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2.diff.gz

Architecture-independent component:

http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8.12.3-5_all.deb

alpha (DEC Alpha):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3-5_alpha.deb

http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.12.3-5_alpha.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2_alpha.deb

arm (ARM):

--

--

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2_arm.deb

hppa (HP PA RISC):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3-5_hppa.deb

http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.12.3-5_hppa.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2_hppa.deb

i386 (Intel IA-32):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3-5_i386.deb

http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.12.3-5_i386.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2_i386.deb

ia64 (Intel IA-64):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3-5_ia64.deb

http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.12.3-5_ia64.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2_ia64.deb

m68k (Motorola 680x0):

--

--

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2_m68k.deb

mips (MIPS (Big Endian)):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3-5_mips.deb

http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.12.3-5_mips.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2_mips.deb

mipsel (MIPS (Little Endian)):

http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.12.3-5_mipsel.deb

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3-5_mipsel.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2_mipsel.deb

powerpc (PowerPC):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3-5_powerpc.deb

http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.12.3-5_powerpc.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2_powerpc.deb

s390 (IBM S/390):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3-5_s390.deb

http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.12.3-5_s390.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2_s390.deb

sparc (Sun SPARC/UltraSPARC):

http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12.3-5_sparc.deb

http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.12.3-5_sparc.deb

http://security.debian.org/pool/updates/main/s/sendmail-wide/sendmail-wide_8.12.3+3.5Wbeta-5.2_sparc.deb

MD5 checksums of the listed files are available in the original advisory. (DSA-257-2)