sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
2010-01-04T21:30:00.640
2025-04-09T00:30:58.490
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | sendmail | sendmail | ≤ 8.14.3 | Yes |
| Application | sendmail | sendmail | 2.6 | Yes |
| Application | sendmail | sendmail | 2.6.1 | Yes |
| Application | sendmail | sendmail | 3.0 | Yes |
| Application | sendmail | sendmail | 3.0.1 | Yes |
| Application | sendmail | sendmail | 4.1 | Yes |
| Application | sendmail | sendmail | 4.55 | Yes |
| Application | sendmail | sendmail | 5 | Yes |
| Application | sendmail | sendmail | 5.59 | Yes |
| Application | sendmail | sendmail | 5.61 | Yes |
| Application | sendmail | sendmail | 5.65 | Yes |
| Application | sendmail | sendmail | 8.6.7 | Yes |
| Application | sendmail | sendmail | 8.7.6 | Yes |
| Application | sendmail | sendmail | 8.7.7 | Yes |
| Application | sendmail | sendmail | 8.7.8 | Yes |
| Application | sendmail | sendmail | 8.7.9 | Yes |
| Application | sendmail | sendmail | 8.7.10 | Yes |
| Application | sendmail | sendmail | 8.8.8 | Yes |
| Application | sendmail | sendmail | 8.9.0 | Yes |
| Application | sendmail | sendmail | 8.9.1 | Yes |
| Application | sendmail | sendmail | 8.9.2 | Yes |
| Application | sendmail | sendmail | 8.9.3 | Yes |
| Application | sendmail | sendmail | 8.10 | Yes |
| Application | sendmail | sendmail | 8.10.0 | Yes |
| Application | sendmail | sendmail | 8.10.1 | Yes |
| Application | sendmail | sendmail | 8.10.2 | Yes |
| Application | sendmail | sendmail | 8.11.0 | Yes |
| Application | sendmail | sendmail | 8.11.1 | Yes |
| Application | sendmail | sendmail | 8.11.2 | Yes |
| Application | sendmail | sendmail | 8.11.3 | Yes |
| Application | sendmail | sendmail | 8.11.4 | Yes |
| Application | sendmail | sendmail | 8.11.5 | Yes |
| Application | sendmail | sendmail | 8.11.6 | Yes |
| Application | sendmail | sendmail | 8.11.7 | Yes |
| Application | sendmail | sendmail | 8.12 | Yes |
| Application | sendmail | sendmail | 8.12 | Yes |
| Application | sendmail | sendmail | 8.12 | Yes |
| Application | sendmail | sendmail | 8.12 | Yes |
| Application | sendmail | sendmail | 8.12 | Yes |
| Application | sendmail | sendmail | 8.12.0 | Yes |
| Application | sendmail | sendmail | 8.12.1 | Yes |
| Application | sendmail | sendmail | 8.12.2 | Yes |
| Application | sendmail | sendmail | 8.12.3 | Yes |
| Application | sendmail | sendmail | 8.12.4 | Yes |
| Application | sendmail | sendmail | 8.12.5 | Yes |
| Application | sendmail | sendmail | 8.12.6 | Yes |
| Application | sendmail | sendmail | 8.12.7 | Yes |
| Application | sendmail | sendmail | 8.12.8 | Yes |
| Application | sendmail | sendmail | 8.12.9 | Yes |
| Application | sendmail | sendmail | 8.12.10 | Yes |
| Application | sendmail | sendmail | 8.13.0 | Yes |
| Application | sendmail | sendmail | 8.13.1 | Yes |
| Application | sendmail | sendmail | 8.13.1.2 | Yes |
| Application | sendmail | sendmail | 8.13.2 | Yes |
| Application | sendmail | sendmail | 8.13.3 | Yes |
| Application | sendmail | sendmail | 8.13.4 | Yes |
| Application | sendmail | sendmail | 8.13.5 | Yes |
| Application | sendmail | sendmail | 8.13.6 | Yes |
| Application | sendmail | sendmail | 8.13.7 | Yes |
| Application | sendmail | sendmail | 8.13.8 | Yes |
| Application | sendmail | sendmail | 8.14.1 | Yes |
| Application | sendmail | sendmail | 8.14.2 | Yes |