Nessus Plugin #11350

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Sendmail ETRN command DOS

Family:

SMTP problems

Category:

infos

Copyright:

This script is Copyright (C) 2003 Xue Yong Zhi

Summary:

Checks the version number

Version:

$Revision: 1.5 $

Cve_id:

CVE-1999-1109

Bugtraq_id:

904

Xrefs:

-

Description:

The remote sendmail server, according to its version number,
allows remote attackers to cause a denial of service by
sending a series of ETRN commands then disconnecting from
the server, while Sendmail continues to process the commands
after the connection has been terminated.

Solution : Install sendmail version 8.10.1 and higher, or
install a vendor supplied patch.

Risk factor : Medium