Secunia

A vulnerability has been reported in Sendmail, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is cause due to an error in the termination of the recursive "mime8to7()" function when performing MIME conversions. This can be exploited to cause a certain sendmail process to crash when it runs out of stack space while processing a deeply nested malformed MIME message.

Successful exploitation causes the delivery of other queued messages to fail or causes the generated core dump files to fill up available disk space.

The vulnerability has been reported in version 8.13.6 and prior.

Solution
Update to version 8.13.7.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Frank Sheiness.

Original Advisory
Sendmail.org:
http://www.sendmail.org/releases/8.13.7.html

Sendmail.com:
http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area