CVE-2006-1173 json
Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhau…
published 2006-06-07 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-1177
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 5.3%
- EPSS 5.3% chance of exploitation in 30 days, percentile 92%
- public exploits
- 0
- none known
Summary
Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.
Patch / fix
- sendmail Debian 14, Debian 13, Debian 12 8.13.7-1
debian advisories DEBIAN-CVE-2006-1173
- sendmail RHEL 3 8.12.11-4.RHEL3.6
- sendmail RHEL 4 8.13.1-3.RHEL4.5
- sendmail-cf RHEL 3 8.12.11-4.RHEL3.6
- sendmail-cf RHEL 4 8.13.1-3.RHEL4.5
red hat advisories RHSA-2006:0515
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2006-1173 updated
security flaw
-
Red Hat Desktop version 3 sendmail 8.12.11-4.RHEL3.6, sendmail-cf 8.12.11-4.RHEL3.6 Red Hat Enterprise Linux AS version 3 sendmail 8.12.11-4.RHEL3.6, sendmail-cf 8.12.11-4.RHEL3.6 Red Hat Enterprise Linux AS version 4 sendmail 8.13.1-3.RHEL4.5, sendmail-cf 8.13.1-3.RHEL4.5 Red Hat Enterprise Linux Desktop version 4 sendmail 8.13.1-3.RHEL4.5, sendmail-cf 8.13.1-3.RHEL4.5 Red Hat Enterprise Linux ES version 3 sendmail 8.12.11-4.RHEL3.6, sendmail-cf 8.12.11-4.RHEL3.6 Red Hat Enterprise Linux ES version 4 sendmail 8.13.1-3.RHEL4.5, sendmail-cf 8.13.1-3.RHEL4.5fixed: vendor fix RHSA-2006:0515
+2 more productsfewer
Red Hat Enterprise Linux WS version 3 sendmail 8.12.11-4.RHEL3.6, sendmail-cf 8.12.11-4.RHEL3.6 Red Hat Enterprise Linux WS version 4 sendmail 8.13.1-3.RHEL4.5, sendmail-cf 8.13.1-3.RHEL4.5
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
5.27% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Classification
- Weakness
-
- CWE-399 Resource Management Errors
References
-
sunsolve.sun.com
/search/document.do?assetkey=1-26-102460-1
vendor-advisory, patch
-
secunia.com
/advisories/20473
third-party-advisory, patch, vendor-advisory
-
sendmail.com
/security/advisories/SA-200605-01.txt.asc
patch, vendor-advisory
-
secunia.com
/advisories/15779
patch, vendor-advisory
-
securityfocus.com
/bid/18433
patch
-
www-1.ibm.com
/support/search.wss?rs=0&q=IY85415&apar=only
vendor-advisory
-
itrc.hp.com
/service/cki/docDisplay.do?docId=c00692635
vendor-advisory
-
debian.org
/security/2006/dsa-1155
vendor-advisory
-
openbsd.org
/errata38.html#sendmail2
vendor-advisory
-
securityfocus.com
/archive/1/442939/100/0/threaded
vendor-advisory
-
redhat.com
/support/errata/RHSA-2006-0515.html
vendor-advisory
-
mandriva.com
/security/advisories?name=MDKSA-2006:104
vendor-advisory
-
slackware.com
/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.631382
vendor-advisory
-
gentoo.org
/security/en/glsa/glsa-200606-19.xml
vendor-advisory
-
lists.suse.com
/archive/suse-security-announce/2006-Jun/0006.html
vendor-advisory
-
www-1.ibm.com
/support/search.wss?rs=0&q=IY85930&apar=only
vendor-advisory
-
secunia.com
/advisories/20684
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/20726
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/21327
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2006/2389
vdb-entry, vendor-advisory
-
secunia.com
/advisories/21647
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/20651
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/20683
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/20650
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/20782
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/20694
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/20673
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/21612
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/20641
vendor-advisory
-
secunia.com
/advisories/20654
vendor-advisory
-
secunia.com
/advisories/20675
vendor-advisory
-
secunia.com
/advisories/20679
vendor-advisory
-
secunia.com
/advisories/21042
vendor-advisory
-
secunia.com
/advisories/21160
vendor-advisory
-
vupen.com
/english/advisories/2006/2388
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11253
vdb-entry, signature
-
vupen.com
/english/advisories/2006/2351
vdb-entry
- fortinet.com /FortiGuardCenter/advisory/FG-2006-18.html
- issues.rpath.com /browse/RPL-526
- support.avaya.com /elmodocs2/security/ASA-2006-148.htm
-
vupen.com
/english/advisories/2006/3135
vdb-entry
-
securitytracker.com
/id?1016295
vdb-entry
-
vupen.com
/english/advisories/2006/2189
vdb-entry
-
securityfocus.com
/archive/1/440744/100/0/threaded
mailing-list
-
vupen.com
/english/advisories/2006/2798
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/27128
vdb-entry
- f-secure.com /security/fsc-2006-5.shtml
-
securityfocus.com
/archive/1/438241/100/0/threaded
mailing-list
-
kb.cert.org
/vuls/id/146718
third-party-advisory, us-government-resource
- osvdb.org /26197
- securityfocus.com /archive/1/437928/100/0/threaded
Sources
- CVE List CVE-2006-1173
- NVD CVE-2006-1173
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.