CVE-2006-7176

Description

The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the localhost.localdomain domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.729

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2010:0237) Low: sendmail security and bug fix update sendmail-8.13.8-8.el5.i386.rpm	Linux
(RHSA-2010:0237) Low: sendmail security and bug fix update sendmail-8.13.8-8.el5.x86_64.rpm	Linux
(RHSA-2010:0237) Low: sendmail security and bug fix update sendmail-cf-8.13.8-8.el5.i386.rpm	Linux
(RHSA-2010:0237) Low: sendmail security and bug fix update sendmail-cf-8.13.8-8.el5.x86_64.rpm	Linux
(RHSA-2010:0237) Low: sendmail security and bug fix update sendmail-devel-8.13.8-8.el5.i386.rpm	Linux
(RHSA-2010:0237) Low: sendmail security and bug fix update sendmail-devel-8.13.8-8.el5.x86_64.rpm	Linux
(RHSA-2010:0237) Low: sendmail security and bug fix update sendmail-doc-8.13.8-8.el5.i386.rpm	Linux
(RHSA-2010:0237) Low: sendmail security and bug fix update sendmail-doc-8.13.8-8.el5.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234