// For flags

CVE-2009-4565

sendmail: incorrect verification of SSL certificate with NUL in name

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

sendmail anterior a v8.14.4 no maneja adecuadamente un carácter '\0' en un fichero Common Name (CN) de un certificado X.509; esto permite (1) a atacantes del tipo hombre-en-el-medio suplantar a su elección servidores SMTP basados en SSL utilizando un certificado de servidor manipulado expedido por una Autoridad Certificadora legítima y (2) a atacantes remotos evitar las restricciones de acceso pretendidas a través de un certificado cliente expedido por una Autoridad Certificadora legítima. Vulnerabilidad relacionada con CVE-2009-2408.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
Attack Vector
Network
Attack Complexity
High
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2010-01-04 CVE Reserved
  • 2010-01-04 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-310: Cryptographic Issues
CAPEC
References (22)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
<= 8.14.3
Search vendor "Sendmail" for product "Sendmail" and version " <= 8.14.3"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
2.6
Search vendor "Sendmail" for product "Sendmail" and version "2.6"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
2.6.1
Search vendor "Sendmail" for product "Sendmail" and version "2.6.1"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
3.0
Search vendor "Sendmail" for product "Sendmail" and version "3.0"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
3.0.1
Search vendor "Sendmail" for product "Sendmail" and version "3.0.1"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
4.1
Search vendor "Sendmail" for product "Sendmail" and version "4.1"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
4.55
Search vendor "Sendmail" for product "Sendmail" and version "4.55"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
5
Search vendor "Sendmail" for product "Sendmail" and version "5"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
5.59
Search vendor "Sendmail" for product "Sendmail" and version "5.59"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
5.61
Search vendor "Sendmail" for product "Sendmail" and version "5.61"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
5.65
Search vendor "Sendmail" for product "Sendmail" and version "5.65"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.6.7
Search vendor "Sendmail" for product "Sendmail" and version "8.6.7"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.7.6
Search vendor "Sendmail" for product "Sendmail" and version "8.7.6"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.7.7
Search vendor "Sendmail" for product "Sendmail" and version "8.7.7"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.7.8
Search vendor "Sendmail" for product "Sendmail" and version "8.7.8"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.7.9
Search vendor "Sendmail" for product "Sendmail" and version "8.7.9"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.7.10
Search vendor "Sendmail" for product "Sendmail" and version "8.7.10"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.8.8
Search vendor "Sendmail" for product "Sendmail" and version "8.8.8"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.9.0
Search vendor "Sendmail" for product "Sendmail" and version "8.9.0"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.9.1
Search vendor "Sendmail" for product "Sendmail" and version "8.9.1"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.9.2
Search vendor "Sendmail" for product "Sendmail" and version "8.9.2"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.9.3
Search vendor "Sendmail" for product "Sendmail" and version "8.9.3"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.10
Search vendor "Sendmail" for product "Sendmail" and version "8.10"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.10.0
Search vendor "Sendmail" for product "Sendmail" and version "8.10.0"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.10.1
Search vendor "Sendmail" for product "Sendmail" and version "8.10.1"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.10.2
Search vendor "Sendmail" for product "Sendmail" and version "8.10.2"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.11.0
Search vendor "Sendmail" for product "Sendmail" and version "8.11.0"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.11.1
Search vendor "Sendmail" for product "Sendmail" and version "8.11.1"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.11.2
Search vendor "Sendmail" for product "Sendmail" and version "8.11.2"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.11.3
Search vendor "Sendmail" for product "Sendmail" and version "8.11.3"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.11.4
Search vendor "Sendmail" for product "Sendmail" and version "8.11.4"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.11.5
Search vendor "Sendmail" for product "Sendmail" and version "8.11.5"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.11.6
Search vendor "Sendmail" for product "Sendmail" and version "8.11.6"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.11.7
Search vendor "Sendmail" for product "Sendmail" and version "8.11.7"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12
Search vendor "Sendmail" for product "Sendmail" and version "8.12"
beta10
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12
Search vendor "Sendmail" for product "Sendmail" and version "8.12"
beta12
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12
Search vendor "Sendmail" for product "Sendmail" and version "8.12"
beta16
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12
Search vendor "Sendmail" for product "Sendmail" and version "8.12"
beta5
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12
Search vendor "Sendmail" for product "Sendmail" and version "8.12"
beta7
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12.0
Search vendor "Sendmail" for product "Sendmail" and version "8.12.0"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12.1
Search vendor "Sendmail" for product "Sendmail" and version "8.12.1"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12.2
Search vendor "Sendmail" for product "Sendmail" and version "8.12.2"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12.3
Search vendor "Sendmail" for product "Sendmail" and version "8.12.3"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12.4
Search vendor "Sendmail" for product "Sendmail" and version "8.12.4"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12.5
Search vendor "Sendmail" for product "Sendmail" and version "8.12.5"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12.6
Search vendor "Sendmail" for product "Sendmail" and version "8.12.6"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12.7
Search vendor "Sendmail" for product "Sendmail" and version "8.12.7"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12.8
Search vendor "Sendmail" for product "Sendmail" and version "8.12.8"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12.9
Search vendor "Sendmail" for product "Sendmail" and version "8.12.9"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.12.10
Search vendor "Sendmail" for product "Sendmail" and version "8.12.10"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.13.0
Search vendor "Sendmail" for product "Sendmail" and version "8.13.0"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.13.1
Search vendor "Sendmail" for product "Sendmail" and version "8.13.1"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.13.1.2
Search vendor "Sendmail" for product "Sendmail" and version "8.13.1.2"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.13.2
Search vendor "Sendmail" for product "Sendmail" and version "8.13.2"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.13.3
Search vendor "Sendmail" for product "Sendmail" and version "8.13.3"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.13.4
Search vendor "Sendmail" for product "Sendmail" and version "8.13.4"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.13.5
Search vendor "Sendmail" for product "Sendmail" and version "8.13.5"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.13.6
Search vendor "Sendmail" for product "Sendmail" and version "8.13.6"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.13.7
Search vendor "Sendmail" for product "Sendmail" and version "8.13.7"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.13.8
Search vendor "Sendmail" for product "Sendmail" and version "8.13.8"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.14.1
Search vendor "Sendmail" for product "Sendmail" and version "8.14.1"
-
Affected
Sendmail
Search vendor "Sendmail"
Sendmail
Search vendor "Sendmail" for product "Sendmail"
8.14.2
Search vendor "Sendmail" for product "Sendmail" and version "8.14.2"
-
Affected