int(2470)

Boletines de Vulnerabilidades

Denegación de servicio en Sendmail al realizar conversión 8 a 7 bits en mensajes MIME

Clasificación de la vulnerabilidad
Propiedad Valor
Nivel de Confianza Oficial
Impacto Denegación de Servicio
Dificultad Experto
Requerimientos del atacante Acceso remoto sin cuenta a un servicio estandar

Información sobre el sistema
Propiedad Valor
Fabricante afectado GNU/Linux
Software afectado Sendmail < 8.13.7

Descripción
Se ha descubierto una vulnerabilidad en Sendmail versión anterior a 8.13.7. La vulnerabilidad reside en un error en la función "mime8to7" al convertir mensajes MIME de 8-bit a 7-bit lo que podría saturar la pila.

Un atacante remoto podría causar una denegación de servicio mediante un fichero MIME especialmente diseñado.

Solución


Actualización de software

Suse Linux
Las actualizaciones pueden descargarse mediante YAST o del servidor FTP oficial de Suse Linux

Red Hat
Red Hat Desktop (v. 3)
Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 2.1)
Red Hat Enterprise Linux AS (v. 3)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux ES (v. 2.1)
Red Hat Enterprise Linux ES (v. 3)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux WS (v. 2.1)
Red Hat Enterprise Linux WS (v. 3)
Red Hat Enterprise Linux WS (v. 4)
Red Hat Linux Advanced Workstation 2.1 Itanium
https://rhn.redhat.com/

Mandriva

Corporate Server 3.0
X86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/RPMS/sendmail-8.12.11-1.2.C30mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/RPMS/sendmail-cf-8.12.11-1.2.C30mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/RPMS/sendmail-devel-8.12.11-1.2.C30mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/RPMS/sendmail-doc-8.12.11-1.2.C30mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/SRPMS/sendmail-8.12.11-1.2.C30mdk.src.rpm
X86_64
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/RPMS/sendmail-8.12.11-1.2.C30mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/RPMS/sendmail-cf-8.12.11-1.2.C30mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/RPMS/sendmail-devel-8.12.11-1.2.C30mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/RPMS/sendmail-doc-8.12.11-1.2.C30mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/SRPMS/sendmail-8.12.11-1.2.C30mdk.src.rpm

Multi Network Firewall 2.0
X86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/mnf/2.0/RPMS/sendmail-8.12.11-1.2.M20mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/mnf/2.0/RPMS/sendmail-cf-8.12.11-1.2.M20mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/mnf/2.0/SRPMS/sendmail-8.12.11-1.2.M20mdk.src.rpm

Mandrivalinux LE2005
X86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/RPMS/sendmail-8.13.3-2.2.102mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/RPMS/sendmail-cf-8.13.3-2.2.102mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/RPMS/sendmail-devel-8.13.3-2.2.102mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/RPMS/sendmail-doc-8.13.3-2.2.102mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/SRPMS/sendmail-8.13.3-2.2.102mdk.src.rpm
X86_64
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/RPMS/sendmail-8.13.3-2.2.102mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/RPMS/sendmail-cf-8.13.3-2.2.102mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/RPMS/sendmail-devel-8.13.3-2.2.102mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/RPMS/sendmail-doc-8.13.3-2.2.102mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/SRPMS/sendmail-8.13.3-2.2.102mdk.src.rpm

Mandrivalinux 2006
X86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/2006.0/RPMS/sendmail-8.13.4-6.2.20060mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/2006.0/RPMS/sendmail-cf-8.13.4-6.2.20060mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/2006.0/RPMS/sendmail-devel-8.13.4-6.2.20060mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/2006.0/RPMS/sendmail-doc-8.13.4-6.2.20060mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/2006.0/SRPMS/sendmail-8.13.4-6.2.20060mdk.src.rpm
X86_64
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/2006.0/RPMS/sendmail-8.13.4-6.2.20060mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/2006.0/RPMS/sendmail-cf-8.13.4-6.2.20060mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/2006.0/RPMS/sendmail-devel-8.13.4-6.2.20060mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/2006.0/RPMS/sendmail-doc-8.13.4-6.2.20060mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/2006.0/SRPMS/sendmail-8.13.4-6.2.20060mdk.src.rpm

NetBSD
NetBSD-current < 2006-05-30
NetBSD 2.* < 2006-06-14
NetBSD 3.* < 2006-06-14
ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-daily/

FreeBSD
FreeBSD 4.11, 5.3, 5.4, 5.5, 6.0, 6.1
http://security.FreeBSD.org/patches/SA-06:17/sendmail.patch

OpenBSD
OpenBSD 3.8
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/008_sendmail2.patch
OpenBSD 3.9
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/003_sendmail2.patch

Sun
Solaris 8 / SPARC / patch 110615-15
Solaris 8 / x86 / patch 110616-15
Solaris 10 / SPARC / patch 122856-02
Solaris 10 / x86 / patch 122857-03
http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage

Hewlett-Packard
Sendmail 8.13.6 / HP Tru64 UNIX Version 5.1B-3 ERP Kit / T64KIT1000619-V51BB26-ES-20060515
http://www2.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT1000619-V51BB26-ES-20060515
Sendmail 8.13.6 / HP Tru64 UNIX Version 5.1B-2/PK4 ERP Kit / T64KIT1000617-V51BB25-ES-20060515
http://www2.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT1000617-V51BB25-ES-20060515
Sendmail 8.13.6 / HP Tru64 UNIX Version 5.1A PK6 ERP Kit / T64KIT1000618-V51AB24-ES-20060515
http://www2.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT1000618-V51AB24-ES-20060515
Sendmail 8.13.6 / HP Tru64 UNIX Version 4.0G PK4 ERP Kit / T64KIT1000635-V40GB22-ES-20060519
http://www2.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT1000635-V40GB22-ES-20060519
Sendmail 8.13.6 / HP Tru64 UNIX Version 4.0F PK8 ERP Kit / DUXKIT1000636-V40FB22-ES-20060519
http://www2.itrc.hp.com/service/patch/patchDetail.do?patchid=DUXKIT1000636-V40FB22-ES-20060519
Sendmail 8.13.6 / HP Internet Express for Tru64 UNIX V6.3 ERP Kit / T64V51AB-IX-631-SENDMAIL-SSRT-061135
http://www2.itrc.hp.com/service/patch/patchDetail.do?patchid=T64V51AB-IX-631-SENDMAIL-SSRT-061135
Sendmail 8.13.6 / HP Internet Express for Tru64 UNIX V6.4 ERP Kit / T64V51AB-IX-641-SENDMAIL-SSRT-061135
http://www2.itrc.hp.com/service/patch/patchDetail.do?patchid=T64V51AB-IX-641-SENDMAIL-SSRT-061135
Sendmail 8.13.6 / HP Internet Explorer for Tru64 UNIX V6.5 ERP Kit / T64V51AB-IX-651-SENDMAIL-SSRT-061135
http://www2.itrc.hp.com/service/patch/patchDetail.do?patchid=T64V51AB-IX-651-SENDMAIL-SSRT-061135

Hewlett-Packard
HP-UX 11.11 / Sendmail 8.13.3 / Revision 2.004
HP-UX 11.23 / Sendmail 8.13.3 / Revision 1.003
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=SMAIL813
HP-UX 11.00 / Sendmail 8.11.1 / Revision 1.09
HP-UX 11.11 / Sendmail 8.11.1 / Revision 1.10
HP-UX 11.23 / Sendmail 8.11.1 / PHNE_34689
HP-UX 11.00 / Sendmail 8.9.3 / PHNE_34900
HP-UX 11.04 / Sendmail 8.9.3 / PHNE_32006
HP-UX 11.11 / Sendmail 8.9.3 / PHNE_34936
HP-UX 11.00 / Sendmail 8.8.6 / PHNE_34900
http://itrc.hp.com

IBM
Interim fix
ftp://aix.software.ibm.com/aix/efixes/security/sendmail_vu146718.tar.Z
AIX 5.2 / APAR IY85930
AIX 5.3 / APAR IY85415
http://www-03.ibm.com/servers/eserver/support/unixservers/aixfixes.html

SGI
IRIX 6.5.[19..26] / Actualizar a 6.5.27 y aplicar parche 7101
IRIX 6.5.[27..29] / Parche 7107
http://support.sgi.com/

SGI
Advanced Linux Environment 3 / RPM / Patch 10314
ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/RPMS
Advanced Linux Environment 3 / SRPM / Patch 10314
ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/SRPMS

Debian
Debian Linux 3.1
Source:
http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13.4-3sarge2.dsc
http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13.4-3sarge2.diff.gz
http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13.4.orig.tar.gz
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.19.dfsg1-0sarge2.dsc
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.19.dfsg1-0sarge2.diff.gz
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/cyrus-sasl2_2.1.19.dfsg1.orig.tar.gz
Architecture-independent component:
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-base_8.13.4-3sarge2_all.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-cf_8.13.4-3sarge2_all.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-doc_8.13.4-3sarge2_all.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.13.4-3sarge2_all.deb
Alpha:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_alpha.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_alpha.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_alpha.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_alpha.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_alpha.deb
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0sarge2_alpha.deb
AMD64:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_amd64.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_amd64.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_amd64.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_amd64.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_amd64.deb
ARM:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_arm.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_arm.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_arm.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_arm.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_arm.deb
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0sarge2_arm.deb
Intel IA-32:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_i386.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_i386.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_i386.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_i386.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_i386.deb
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0sarge2_i386.deb
Intel IA-64:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_ia64.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_ia64.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_ia64.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_ia64.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_ia64.deb
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0sarge2_ia64.deb
HPPA:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_hppa.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_hppa.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_hppa.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_hppa.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_hppa.deb
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0sarge2_hppa.deb
Motorola 680x0:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_m68k.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_m68k.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_m68k.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_m68k.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_m68k.deb
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0sarge2_m68k.deb
Big endian MIPS:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_mips.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_mips.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_mips.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_mips.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_mips.deb
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0sarge2_mips.deb
Little endian MIPS:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_mipsel.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_mipsel.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_mipsel.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_mipsel.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_mipsel.deb
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0sarge2_mipsel.deb
PowerPC:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_powerpc.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_powerpc.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_powerpc.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_powerpc.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_powerpc.deb
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0sarge2_powerpc.deb
IBM S/390:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_s390.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_s390.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_s390.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_s390.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_s390.deb
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0sarge2_s390.deb
Sun Sparc:
http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_8.13.4-3sarge2_sparc.deb
http://security.debian.org/pool/updates/main/s/sendmail/libmilter0_8.13.4-3sarge2_sparc.deb
http://security.debian.org/pool/updates/main/s/sendmail/rmail_8.13.4-3sarge2_sparc.deb
http://security.debian.org/pool/updates/main/s/sendmail/sendmail-bin_8.13.4-3sarge2_sparc.deb
http://security.debian.org/pool/updates/main/s/sendmail/sensible-mda_8.13.4-3sarge2_sparc.deb
http://ftp.debian.org/debian/pool/main/c/cyrus-sasl2/libsasl2_2.1.19.dfsg1-0sarge2_sparc.deb

Sun

Solaris 8
SPARC / patch 110615-15
x86 / patch 110616-15

Solaris 9
SPARC / patch 113575-07
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113575-07-1
x86 / patch 114137-06
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-114137-06-1

Solaris 10
SPARC / patch 122856-02
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-122856-02-1
x86 / patch 122857-03
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-122857-03-1

Identificadores estándar
Propiedad Valor
CVE CVE-2006-1173
BID 18433

Recursos adicionales
SUSE Security Advisory (SUSE-SA:2006:032)
http://www.novell.com/linux/security/advisories/2006_32_sendmail.html

Red Hat Security Advisory (RHSA-2006:0515-14)
https://rhn.redhat.com/errata/RHSA-2006-0515.html

Mandriva Security Advisory (MDKSA-2006:104)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:104

NetBSD Security Advisory (NetBSD-SA2006-017)
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-017.txt.asc

FreeBSD Security Advisory (FreeBSD-SA-06:17.sendmail)
http://security.freebsd.org/advisories/FreeBSD-SA-06:17.sendmail.asc

Sun Alert Notification (102460)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102460-1

HP SECURITY BULLETIN (HPSBTU02116)
http://www4.itrc.hp.com/service/cki/docDisplay.do?docId=c00692635

HP SECURITY BULLETIN (HPSBUX02124)
http://www4.itrc.hp.com/service/cki/docDisplay.do?docId=c00680632

IBM Security Advisory
http://www-1.ibm.com/support/docview.wss?uid=isg1IY85930

IBM Security Advisory
http://www-1.ibm.com/support/docview.wss?uid=isg1IY85415

SGI Security Advisory (20060601-01-P)
ftp://patches.sgi.com/support/free/security/advisories/20060601-01-P.asc

SGI Security Advisory (20060602-01-U)
ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc

Debian Security Advisory (DSA-1155-2)
http://www.us.debian.org/security/2006/dsa-1155

Histórico de versiones
Versión Comentario Fecha
1.0 Aviso emitido 2006-06-17
1.1 Aviso emitido por SGI (20060601-01-P) 2006-06-19
1.2 Aviso emitido por SGI (20060602-01-U) 2006-06-23
1.3 Aviso actualizado por Red Hat (RHSA-2006:0515-14) 2006-06-30
1.4 Aviso actualizado por Sun (102460) 2006-07-11
1.5 Aviso actualizado por Sun (102460) 2006-07-24
1.6 Aviso emitido por HP (HPSBUX02124) 2006-08-02
1.7 Aviso actualizado por Sun (102460) 2006-08-03
1.8 Aviso actualizado por HP (HPSBUX02124) 2006-08-10
1.9 Aviso emitido por Debian (DSA-1155-2) 2006-08-25
1.10 Aviso actualizado por Sun (102460) 2006-08-29

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CCN
CCN-CERT