sendmail: X.509 NULL spoofing vulnerability

sendmail: X.509 NULL spoofing vulnerability An error in the hostname matching in sendmail might enable remote attackers to conduct man-in-the-middle attacks. sendmail 2012-06-25 2012-06-25 299120 remote 8.14.4 8.14.4

sendmail is a widely-used Mail Transport Agent (MTA).

A vulnerability has been discovered in sendmail. Please review the CVE identifier referenced below for details.

A remote attacker might employ a specially crafted certificate to conduct man-in-the-middle attacks on SSL connections made using sendmail.

There is no known workaround at this time.

All sendmail users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=mail-mta/sendmail-8.14.4"

CVE-2009-4565 underling craig