Code injection

Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname...

CVE-2006-0845

Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname...

CVE-2006-0845

CVE-2006-0845 affects Leif M. Wright's Blog 3.5. The vulnerability arises when an administrator can configure the sendmail path to a malicious pathname, allowing remote authenticated users with admin privileges to execute arbitrary shell commands. The EVULN/SECURITYVULNS records indicate a shell ...

milter-bogom -- headerless message crash

Juan J. Marítnez reports: The milter crashes while processing a headerless message Impact: bogom crashes and sendmail moves it to error state...

GLSA-200512-05 : Xmail: Privilege escalation through sendmail

The remote host is affected by the vulnerability described in GLSA-200512-05 Xmail: Privilege escalation through sendmail iDEFENSE reported that the AddressFromAtPtr function in the sendmail program fails to check bounds on arguments passed from other functions, and as a result an exploitable sta...

Xmail: Privilege escalation through sendmail

Background Xmail is an Internet and intranet mail server. Description iDEFENSE reported that the AddressFromAtPtr function in the sendmail program fails to check bounds on arguments passed from other functions, and as a result an exploitable stack overflow condition occurs when specifying the "-t...

Warm Links XSS vuln.

Warm Links XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/warm-links-xss-vuln.html vendor:http://www.mrcgiguy.com/wldetails.shtml affected version:v.1.0.0 and prior Product Description: Directory style index allows for easy navigation Doe...

DSA-902-1 xmail - buffer overflow

Bulletin has no description...

Sendmail 8.7.x, 8.8.x - 8.8.2 Local Overflow Vulnerability

The remote sendmail server, according to its version number, allows local user to start it in daemon mode and gain root privileges. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sendmail 8.x - 8.10.0 ETRN Command DoS Vulnerability

The remote Sendmail server, according to its version number, allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated...

Sendmail Queue Manipulation & Destruction Vulnerability

The remote Sendmail server, according to its version number, might be vulnerable to a queue destruction vulnerability. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sendmail 8.8.8 - 8.12.7 Double Pipe Access Validation Vulnerability

Sendmail is prone to a double pipe access validation vulnerability. SPDX-FileCopyrightText: 2003 StrongHoldNet Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Sendmail 5.79 - 8.12.7 Remote Header Buffer Overflow Vulnerability

The remote Sendmail server, according to its version number, may be vulnerable to a remote buffer overflow allowing remote users to gain root privileges. SPDX-FileCopyrightText: 2003 SECNAP Network Security Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Sendmail 8.x < 8.6.7 Long Debug Local Overflow Vulnerability

The remote Sendmail server, according to its version number, allows local users to gain root access via a large value in the debug -d command line option. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Sendmail DEBUG Mode Leak Vulnerability

According to the version number of the remote mail server, a local user may be able to obtain the complete mail configuration and other interesting information about the mail queue. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and...

Sambar sendmail Vulnerability

The Sambar webserver provides a web interface for sending emails. It is possible to simply pass a POST request to /session/sendmail and by this send mails to anyone you want. Due to the fact that Sambar does not check HTTP referrers you do not need direct access to the server...

Sendmail < 8.10.0 mail.local DoS Vulnerability

mail.local in the remote Sendmail server, according to its version number, does not properly identify the SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Sendmail 8.12.0.x Custom Configuration File Vulnerability

The remote Sendmail server, according to its version number, may be vulnerable to a SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Sendmail WIZ Command Enabled

The remote Sendmail service accepts the WIZ command. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sendmail:sendmail";...

Sendmail 8.8.8 - 8.9.2 Parsing Redirection DoS Vulnerability

The remote Sendmail server, according to its version number, allows remote attackers cause a denial of service by sending messages with a large number of headers. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...