CVE-2009-4565

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

• sendmail sendmail (<= 8.14.3) • sendmail sendmail 2.6 • sendmail sendmail 2.6.1 • sendmail sendmail 3.0 • sendmail sendmail 3.0.1 • sendmail sendmail 4.1 • sendmail sendmail 4.55 • sendmail sendmail 5 • sendmail sendmail 5.59 • sendmail sendmail 5.61 • sendmail sendmail 5.65 • sendmail sendmail 8.6.7 • sendmail sendmail 8.7.6 • sendmail sendmail 8.7.7 • sendmail sendmail 8.7.8 • sendmail sendmail 8.7.9 • sendmail sendmail 8.7.10 • sendmail sendmail 8.8.8 • sendmail sendmail 8.9.0 • sendmail sendmail 8.9.1 • sendmail sendmail 8.9.2 • sendmail sendmail 8.9.3 • sendmail sendmail 8.10 • sendmail sendmail 8.10.0 • sendmail sendmail 8.10.1 • sendmail sendmail 8.10.2 • sendmail sendmail 8.11.0 • sendmail sendmail 8.11.1 • sendmail sendmail 8.11.2 • sendmail sendmail 8.11.3 • sendmail sendmail 8.11.4 • sendmail sendmail 8.11.5 • sendmail sendmail 8.11.6 • sendmail sendmail 8.11.7 • sendmail sendmail 8.12 • sendmail sendmail 8.12.0 • sendmail sendmail 8.12.1 • sendmail sendmail 8.12.2 • sendmail sendmail 8.12.3 • sendmail sendmail 8.12.4 • sendmail sendmail 8.12.5 • sendmail sendmail 8.12.6 • sendmail sendmail 8.12.7 • sendmail sendmail 8.12.8 • sendmail sendmail 8.12.9 • sendmail sendmail 8.12.10 • sendmail sendmail 8.13.0 • sendmail sendmail 8.13.1 • sendmail sendmail 8.13.1.2 • sendmail sendmail 8.13.2 • sendmail sendmail 8.13.3 • sendmail sendmail 8.13.4 • sendmail sendmail 8.13.5 • sendmail sendmail 8.13.6 • sendmail sendmail 8.13.7 • sendmail sendmail 8.13.8 • sendmail sendmail 8.14.1 • sendmail sendmail 8.14.2