Package name
sendmail
Date
2003-08-26
Advisory ID
MDKSA-2003:086
Affected versions
8.2 i586 , CS2.1 i586 , 8.2 i586 , 9.0 i586 , CS2.1 x86_64

Problem description

A vulnerability was discovered in all 8.12.x versions of sendmail up to and including 8.12.8. Due to wrong initialization of RESOURCE_RECORD_T structures, if sendmail receives a bad DNS reply it will call free() on random addresses which usually causes sendmail to crash. These updated packages are patched to fix the problem.

Updated packages

8.2 i586

 552617df801abbb743ea19f08efe9cd5  ppc/8.2/RPMS/sendmail-8.12.1-4.4mdk.ppc.rpm
634cf389d9b6d3782d52d6b4a9a06862  ppc/8.2/RPMS/sendmail-cf-8.12.1-4.4mdk.ppc.rpm
4e5fdd49f36c8263f9f8d4a5405beb27  ppc/8.2/RPMS/sendmail-devel-8.12.1-4.4mdk.ppc.rpm
320c1c788abf30b8fbafc6b6fff8ad6f  ppc/8.2/RPMS/sendmail-doc-8.12.1-4.4mdk.ppc.rpm
7340654c00efcb2d64149cc946e1ea3b  ppc/8.2/SRPMS/sendmail-8.12.1-4.4mdk.src.rpm

CS2.1 i586

 06f312efc82a853bef8f244f0a7d62b6  corporate/2.1/RPMS/sendmail-8.12.6-3.4mdk.i586.rpm
6159dd74781b4e12ba2d9cb8c74cebc5  corporate/2.1/RPMS/sendmail-cf-8.12.6-3.4mdk.i586.rpm
0947b751f4934fe29f32eb02670640ee  corporate/2.1/RPMS/sendmail-devel-8.12.6-3.4mdk.i586.rpm
9b768e4a330cc0cd6cdebd1470953247  corporate/2.1/RPMS/sendmail-doc-8.12.6-3.4mdk.i586.rpm
8458487a8e2a69b3648896e342eb4c1a  corporate/2.1/SRPMS/sendmail-8.12.6-3.4mdk.src.rpm

8.2 i586

 2039013cc832600fe00c8c16f04e167f  8.2/RPMS/sendmail-8.12.1-4.4mdk.i586.rpm
a628b53c10b173ad6b56ec818411e4a8  8.2/RPMS/sendmail-cf-8.12.1-4.4mdk.i586.rpm
41b1161434cab61b55bbda169949a980  8.2/RPMS/sendmail-devel-8.12.1-4.4mdk.i586.rpm
d7d9e039cb3265ad955ce1401d97ca98  8.2/RPMS/sendmail-doc-8.12.1-4.4mdk.i586.rpm
7340654c00efcb2d64149cc946e1ea3b  8.2/SRPMS/sendmail-8.12.1-4.4mdk.src.rpm

9.0 i586

 06f312efc82a853bef8f244f0a7d62b6  9.0/RPMS/sendmail-8.12.6-3.4mdk.i586.rpm
6159dd74781b4e12ba2d9cb8c74cebc5  9.0/RPMS/sendmail-cf-8.12.6-3.4mdk.i586.rpm
0947b751f4934fe29f32eb02670640ee  9.0/RPMS/sendmail-devel-8.12.6-3.4mdk.i586.rpm
9b768e4a330cc0cd6cdebd1470953247  9.0/RPMS/sendmail-doc-8.12.6-3.4mdk.i586.rpm
8458487a8e2a69b3648896e342eb4c1a  9.0/SRPMS/sendmail-8.12.6-3.4mdk.src.rpm

CS2.1 x86_64

 04d7ce56ad6b62339622ae6e030234ed  x86_64/corporate/2.1/RPMS/sendmail-8.12.6-3.4mdk.x86_64.rpm
4b64a8056a3499e1d36ac1de72bc8c7e  x86_64/corporate/2.1/RPMS/sendmail-cf-8.12.6-3.4mdk.x86_64.rpm
5e2ac30e590d3985c8de9ced5178d875  x86_64/corporate/2.1/RPMS/sendmail-devel-8.12.6-3.4mdk.x86_64.rpm
aabddfe03a3a0fb88082c0311b318738  x86_64/corporate/2.1/RPMS/sendmail-doc-8.12.6-3.4mdk.x86_64.rpm
8458487a8e2a69b3648896e342eb4c1a  x86_64/corporate/2.1/SRPMS/sendmail-8.12.6-3.4mdk.src.rpm

References