CVE-2009-1490
EPSS 7.8%
Description
Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.
How to fix CVE-2009-1490
To remediate CVE-2009-1490, upgrade the affected package to a fixed version below.
- Debian/sendmail—upgrade to 8.13.2-0 or later
Is CVE-2009-1490 being exploited?
Moderate — EPSS is 7.8%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 8.13.2-0