VDB
BDU%3A2024-02339
BDU%3A2024-02339
PUBLISHED
CVSS 5 MEDIUM
Уязвимость программного обеспечения SendMail SMTP Server , связанная с недостаточной проверкой подлинности данных, позволяющая нарушителю обойти механизм защиты и внедрить сообщения электронной почты с поддельным адресом MAIL FROM
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., ООО «Ред Софт», Sendmail Inc., FreeBSD Project | Red Hat Enterprise Linux, РЕД ОС (запись в едином реестре российских программ №3751), SendMail SMTP Server, FreeBSD | |
| n/a | n/a | n/a |
Timeline
- Dec 24, 2023 CVE Published
- Dec 24, 2023 PoC Published
- Jan 4, 2024 PoC Published
- Jan 4, 2024 PoC Published
- Jan 5, 2024 PoC Published
- Jan 18, 2024 PoC Published
- May 26, 2025 CVE Updated
References
- https://access.redhat.com/security/cve/CVE-2023-51765 advisory
- http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-51765 url
- https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/ url
- https://www.openwall.com/lists/oss-security/2023/12/22/7 url
- https://github.com/freebsd/freebsd-src/commit/5dd76dd0cc19450133aa379ce0ce4a68ae07fb39#diff-afdf514b32ac88004952c11660c57bc96c3d8b2234007c1cbd8d7ed7fd7935cc url
- [oss-security] 20231224 Re: Re: New SMTP smuggling attack mailing-list
- https://bugzilla.suse.com/show_bug.cgi?id=1218351 url
- https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11782.html url
- [oss-security] 20231229 Re: Re: New SMTP smuggling attack mailing-list
- [oss-security] 20231230 Re: Re: New SMTP smuggling attack mailing-list
- [debian-lts-announce] 20240615 [SECURITY] [DLA 3829-1] sendmail security update mailing-list
- https://www.openwall.com/lists/oss-security/2023/12/21/7 url
- [oss-security] 20231225 Re: Re: New SMTP smuggling attack mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=2255869 url
- [oss-security] 20231226 Re: New SMTP smuggling attack mailing-list
- [oss-security] 20231230 Re: Re: New SMTP smuggling attack mailing-list
- https://www.youtube.com/watch?v=V8KPV96g1To url
- https://lwn.net/Articles/956533/ url