CVE-2006-7176

Name of the Vulnerable Software and Affected Versions Sendmail versions 8.13.1-2 and earlier on Red Hat Enterprise Linux 4 Update 4 and earlier

Description The issue allows remote attackers to potentially spoof messages by not rejecting the "localhost.localdomain" domain name for e-mail messages coming from external hosts.

Recommendations For Sendmail version 8.13.1-2 and earlier on Red Hat Enterprise Linux 4 Update 4 and earlier, consider updating to a newer version that rejects the "localhost.localdomain" domain name for e-mail messages from external hosts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.