CVE-2006-1173: Sendmail

Medium severity, CVSS 5.0. EPSS: 5.3% chance of exploitation in the next 30 days.

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.

Affected products

• Sendmail Sendmail: up to and including 8.13.6; version 8.8.8 only; version 8.9.0 only; version 8.9.1 only; version 8.9.2 only; version 8.9.3 only; …

Published 2006-06-07. Last modified 2026-06-16.