CVE-2006-0058

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 28.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-22 · updated 2026-06-16

Description

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.

Affected products

Sendmail: 8.13.0, 8.13.1, 8.13.2, 8.13.3, 8.13.4, 8.13.5

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635
http://secunia.com/advisories/19342
http://secunia.com/advisories/19345
http://secunia.com/advisories/19346
http://secunia.com/advisories/19349
http://secunia.com/advisories/19356

Get alerted when CVE-2006-0058 or the next vulnerability affects your stack