{"id":"CVE-2006-0058","url":"https://www.cyber-defence.io/tools/cve/CVE-2006-0058","generatedAt":"2026-10-27T20:42:51.498Z","title":"Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.","description":"Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.","published":"2006-03-22T20:06:00.000Z","lastModified":"2026-06-16T22:19:49.000Z","status":"Modified","sourceIdentifier":"cret@cert.org","cvss":{"version":"2.0","score":7.6,"severity":"HIGH","vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C"},"cwe":[],"affected":["sendmail/sendmail"],"epss":{"score":0.28735,"percentile":0.98128,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2006-07-21","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":2051,"kind":"exploit","title":"Sendmail 8.13.5 - Remote Signal Handling (PoC)","url":"https://www.exploit-db.com/exploits/2051","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/2051.py","file":"exploits/linux/dos/2051.py","published":"2006-07-21","added":"2006-07-20","updated":"2016-08-30","author":"redsand","type":"dos","platform":"linux","port":null,"verified":true,"codes":["OSVDB-24037","CVE-2006-0058"],"tags":null,"aliases":null,"applicationUrl":"http://www.exploit-db.comsendmail.8.13.5.tar.gz","screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 28.7%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.asc","source":"cret@cert.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-010.txt.asc","source":"cret@cert.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.24/SCOSA-2006.24.txt","source":"cret@cert.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060302-01-P","source":"cret@cert.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U","source":"cret@cert.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00629555","source":"cret@cert.org"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00692635","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19342","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19345","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19346","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19349","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19356","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19360","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19361","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19363","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19367","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19368","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19394","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19404","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19407","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19450","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19466","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19532","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19533","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19676","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/19774","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/20243","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/20723","source":"cret@cert.org"},{"url":"http://securityreason.com/securityalert/612","source":"cret@cert.org"},{"url":"http://securityreason.com/securityalert/743","source":"cret@cert.org"},{"url":"http://securitytracker.com/id?1015801","source":"cret@cert.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.619600","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102262-1","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102324-1","source":"cret@cert.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200494-1","source":"cret@cert.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-074.htm","source":"cret@cert.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-078.htm","source":"cret@cert.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY82992&apar=only","source":"cret@cert.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY82993&apar=only","source":"cret@cert.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY82994&apar=only","source":"cret@cert.org"},{"url":"http://www.ciac.org/ciac/bulletins/q-151.shtml","source":"cret@cert.org"},{"url":"http://www.debian.org/security/2006/dsa-1015","source":"cret@cert.org"},{"url":"http://www.f-secure.com/security/fsc-2006-2.shtml","source":"cret@cert.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200603-21.xml","source":"cret@cert.org"},{"url":"http://www.iss.net/threats/216.html","source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/834865","tags":["US Government Resource"],"source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:058","source":"cret@cert.org"},{"url":"http://www.novell.com/linux/security/advisories/2006_17_sendmail.html","source":"cret@cert.org"},{"url":"http://www.openbsd.org/errata38.html#sendmail","source":"cret@cert.org"},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.007-sendmail.html","source":"cret@cert.org"},{"url":"http://www.osvdb.org/24037","source":"cret@cert.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00017.html","source":"cret@cert.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00018.html","source":"cret@cert.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0264.html","tags":["Patch","Vendor Advisory"],"source":"cret@cert.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0265.html","tags":["Patch","Vendor Advisory"],"source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/428536/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/archive/1/428656/100/0/threaded","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/17192","source":"cret@cert.org"},{"url":"http://www.sendmail.com/company/advisory/index.shtml","source":"cret@cert.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-081A.html","tags":["US Government Resource"],"source":"cret@cert.org"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-0058","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}