漏洞描述
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.vupen.comhttp://www.vupen.com/english/advisories/2006/1051↗secunia.comhttp://secunia.com/advisories/19404↗secunia.comhttp://secunia.com/advisories/20723↗www14.software.ibm.comhttp://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688↗www.us-cert.govhttp://www.us-cert.gov/cas/techalerts/TA06-081A.html↗secunia.comhttp://secunia.com/advisories/19450↗sunsolve.sun.comhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-102324-1↗www-1.ibm.comhttp://www-1.ibm.com/support/search.wss?rs=0&q=IY82993&apar=only↗www.vupen.comhttp://www.vupen.com/english/advisories/2006/2189↗www.vupen.comhttp://www.vupen.com/english/advisories/2006/1068↗securityreason.comhttp://securityreason.com/securityalert/743↗sunsolve.sun.comhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-102262-1↗www.gentoo.orghttp://www.gentoo.org/security/en/glsa/glsa-200603-21.xml↗www.openpkg.orghttp://www.openpkg.org/security/advisories/OpenPKG-SA-2006.007-sendmail.html↗secunia.comhttp://secunia.com/advisories/19361↗www.redhat.comhttp://www.redhat.com/archives/fedora-announce-list/2006-April/msg00018.html↗www.ciac.orghttp://www.ciac.org/ciac/bulletins/q-151.shtml↗secunia.comhttp://secunia.com/advisories/19368↗securityreason.comhttp://securityreason.com/securityalert/612↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/428536/100/0/threaded↗www-1.ibm.comhttp://www-1.ibm.com/support/search.wss?rs=0&q=IY82994&apar=only↗www.vupen.comhttp://www.vupen.com/english/advisories/2006/1139↗www.iss.nethttp://www.iss.net/threats/216.html↗www.sendmail.comhttp://www.sendmail.com/company/advisory/index.shtml↗secunia.comhttp://secunia.com/advisories/19367↗securitytracker.comhttp://securitytracker.com/id?1015801↗secunia.comhttp://secunia.com/advisories/20243↗secunia.comhttp://secunia.com/advisories/19363↗secunia.comhttp://secunia.com/advisories/19774↗secunia.comhttp://secunia.com/advisories/19394↗secunia.comhttp://secunia.com/advisories/19342↗secunia.comhttp://secunia.com/advisories/19407↗secunia.comhttp://secunia.com/advisories/19533↗support.avaya.comhttp://support.avaya.com/elmodocs2/security/ASA-2006-074.htm↗secunia.comhttp://secunia.com/advisories/19346↗www.osvdb.orghttp://www.osvdb.org/24037↗www.securityfocus.comhttp://www.securityfocus.com/bid/17192↗www.vupen.comhttp://www.vupen.com/english/advisories/2006/1529↗www.openbsd.orghttp://www.openbsd.org/errata38.html#sendmail↗sunsolve.sun.comhttp://sunsolve.sun.com/search/document.do?assetkey=1-66-200494-1↗secunia.comhttp://secunia.com/advisories/19532↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDKSA-2006:058↗www.debian.orghttp://www.debian.org/security/2006/dsa-1015↗www.redhat.comhttp://www.redhat.com/support/errata/RHSA-2006-0265.html↗exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/24584↗www-1.ibm.comhttp://www-1.ibm.com/support/search.wss?rs=0&q=IY82992&apar=only↗oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1689↗secunia.comhttp://secunia.com/advisories/19349↗www.vupen.comhttp://www.vupen.com/english/advisories/2006/2490↗secunia.comhttp://secunia.com/advisories/19356↗secunia.comhttp://secunia.com/advisories/19360↗www.f-secure.comhttp://www.f-secure.com/security/fsc-2006-2.shtml↗www.kb.cert.orghttp://www.kb.cert.org/vuls/id/834865↗h20000.www2.hp.comhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555↗secunia.comhttp://secunia.com/advisories/19676↗www.vupen.comhttp://www.vupen.com/english/advisories/2006/1049↗oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11074↗www.redhat.comhttp://www.redhat.com/support/errata/RHSA-2006-0264.html↗www.vupen.comhttp://www.vupen.com/english/advisories/2006/1072↗www14.software.ibm.comhttp://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751↗secunia.comhttp://secunia.com/advisories/19345↗www.vupen.comhttp://www.vupen.com/english/advisories/2006/1157↗itrc.hp.comhttp://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635↗www.novell.comhttp://www.novell.com/linux/security/advisories/2006_17_sendmail.html↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/428656/100/0/threaded↗secunia.comhttp://secunia.com/advisories/19466↗support.avaya.comhttp://support.avaya.com/elmodocs2/security/ASA-2006-078.htm↗slackware.comhttp://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.619600↗www.redhat.comhttp://www.redhat.com/archives/fedora-announce-list/2006-April/msg00017.html↗