CVE-2006-7176

NameCVE-2006-7176
DescriptionThe version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severitymedium

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
sendmail (PTS)stretch8.15.2-8+deb9u1fixed
buster8.15.2-14~deb10u1fixed
bullseye, sid8.15.2-20fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
sendmailsource(unstable)(not affected)

Notes

- sendmail <not-affected> (Not a program flaw, a DNS error)

Search for package or bug name: Reporting problems