• info
• discussion
• exploit
• solution
• references

Sendmail Insecure Temporary File Privilege Escalation Vulnerability

Solution:
Debian has released fixes to address this issue.


Sendmail Consortium Sendmail 8.12.3

• Debian libmilter-dev_8.12.3-6.4_alpha.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.12.3-6.4_alpha.deb


• Debian libmilter-dev_8.12.3-6.4_arm.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.12.3-6.4_arm.deb


• Debian libmilter-dev_8.12.3-6.4_hppa.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.12.3-6.4_hppa.deb


• Debian libmilter-dev_8.12.3-6.4_i386.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.12.3-6.4_i386.deb


• Debian libmilter-dev_8.12.3-6.4_ia64.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.12.3-6.4_ia64.deb


• Debian libmilter-dev_8.12.3-6.4_m68k.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.12.3-6.4_m68k.deb


• Debian libmilter-dev_8.12.3-6.4_mips.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.12.3-6.4_mips.deb


• Debian libmilter-dev_8.12.3-6.4_mipsel.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.12.3-6.4_mipsel.deb


• Debian libmilter-dev_8.12.3-6.4_powerpc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.12.3-6.4_powerpc.deb


• Debian libmilter-dev_8.12.3-6.4_s390.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.12.3-6.4_s390.deb


• Debian libmilter-dev_8.12.3-6.4_sparc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/libmilter-dev_ 8.12.3-6.4_sparc.deb


• Debian sendmail_8.12.3-6.4_alpha.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12. 3-6.4_alpha.deb


• Debian sendmail_8.12.3-6.4_arm.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12. 3-6.4_arm.deb


• Debian sendmail_8.12.3-6.4_hppa.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12. 3-6.4_hppa.deb


• Debian sendmail_8.12.3-6.4_i386.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12. 3-6.4_i386.deb


• Debian sendmail_8.12.3-6.4_ia64.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12. 3-6.4_ia64.deb


• Debian sendmail_8.12.3-6.4_m68k.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12. 3-6.4_m68k.deb


• Debian sendmail_8.12.3-6.4_mips.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12. 3-6.4_mips.deb


• Debian sendmail_8.12.3-6.4_mipsel.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12. 3-6.4_mipsel.deb


• Debian sendmail_8.12.3-6.4_powerpc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12. 3-6.4_powerpc.deb


• Debian sendmail_8.12.3-6.4_s390.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12. 3-6.4_s390.deb


• Debian sendmail_8.12.3-6.4_sparc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.12. 3-6.4_sparc.deb

Sendmail Consortium Sendmail 8.9.3

• Debian sendmail_8.9.3-26.1_alpha.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3 -26.1_alpha.deb


• Debian sendmail_8.9.3-26.1_arm.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3 -26.1_arm.deb


• Debian sendmail_8.9.3-26.1_i386.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3 -26.1_i386.deb


• Debian sendmail_8.9.3-26.1_m68k.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3 -26.1_m68k.deb


• Debian sendmail_8.9.3-26.1_powerpc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3 -26.1_powerpc.deb


• Debian sendmail_8.9.3-26.1_sparc.deb
  http://security.debian.org/pool/updates/main/s/sendmail/sendmail_8.9.3 -26.1_sparc.deb