CVE-2006-7175

NameCVE-2006-7175
DescriptionThe version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not allow the administrator to disable SSLv2 encryption, which could cause less secure channels to be used than desired.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severityhigh

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
sendmail (PTS)stretch8.15.2-8+deb9u1fixed
buster8.15.2-14~deb10u1fixed
bullseye, sid8.15.2-20fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
sendmailsource(unstable)(not affected)

Notes

- sendmail <not-affected> (Debian compiles with FFR_TLS correctly)

Search for package or bug name: Reporting problems