Description: A vulnerability has been reported in Sendmail, which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is cause due to an error in the termination of the recursive "mime8to7()" function when performing MIME conversions. This can be exploited to cause a certain sendmail process to crash when it runs out of stack space while processing a deeply nested malformed MIME message.
Successful exploitation causes the delivery of other queued messages to fail or causes the generated core dump files to fill up available disk space.
The vulnerability has been reported in version 8.13.6 and prior.
Solution: Update to version 8.13.7.
Users of the commercial products should see the patch matrix in the vendor advisory for details.
Provided and/or discovered by: The vendor credits Frank Sheiness.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
