Sendmail .forward File Local Privilege Escalation

Binary data 2010.prm...

Sendmail HELO Command Overflow

Binary data 2032.prm...

Sendmail < 8.8.3 mime7to8 Function Overflow

Binary data 2014.prm...

Mandrake Linux Security Advisory : sendmail (MDKSA-2003:028)

A vulnerability was discovered in sendmail by Mark Dowd of ISS X-Force that involves mail header manipulation that can result in a remote user gaining root access to the system running the vulnerable sendmail. Patches supplied by the sendmail development team have been applied to correct this...

Mandrake Linux Security Advisory : sendmail (MDKSA-2002:083)

A vulnerability was discovered by zen-parse and Pedram Amini in the sendmail MTA. They found two ways to exploit smrsh, an application intended as a replacement for the sh shell for use with sendmail; the first by inserting specially formatted commands in the /.forward file and secondly by callin...

Mandrake Linux Security Advisory : sendmail (MDKSA-2003:086)

A vulnerability was discovered in all 8.12.x versions of sendmail up to and including 8.12.8. Due to wrong initialization of RESOURCERECORDT structures, if sendmail receives a bad DNS reply it will call free on random addresses which usually causes sendmail to crash. These updated packages are...

Mandrake Linux Security Advisory : sendmail (MDKSA-2003:042-1)

Michal Zalweski discovered a vulnerability in sendmail versions earlier than 8.12.9 in the address parser, which performs insufficient bounds checking in certain conditions due to a char to int conversion. This vulnerability makes it poissible for an attacker to take control of sendmail and is...

Mandrake Linux Security Advisory : sendmail (MDKSA-2003:092)

A buffer overflow vulnerability was discovered in the address parsing code in all versions of sendmail prior to 8.12.10 by Michal Zalewski, with a patch to fix the problem provided by Todd C. Miller. This vulnerability seems to be remotely exploitable on Linux systems running on the x86 platform;...

Mandrake Linux Security Advisory : sendmail (MDKSA-2001:075)

An input validation error exists in sendmail that may allow local users to write arbitrary data to process memory. This could possibly allow the execute of code or commands with elevated privileges and may also allow a local attacker to gain access to the root account. %NASLMINLEVEL 70300 C Tenab...

SUSE-SA:2003:013: sendmail, sendmail-tls

The remote host is missing the patch for the advisory SUSE-SA:2003:013 sendmail, sendmail-tls. sendmail is the most widely used mail transport agent MTA in the internet. A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SUSE products. These versions...

SUSE-SA:2003:023: sendmail, sendmail-tls

The remote host is missing the patch for the advisory SUSE-SA:2003:023 sendmail, sendmail-tls. sendmail is the most widely used mail transport agent MTA in the internet. A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SUSE products. These versions...

SUSE-SA:2003:035: sendmail

The remote host is missing the patch for the advisory SUSE-SA:2003:035 sendmail. The well known and widely used MTA sendmail is vulnerable to a remote denial-of-service attack in version 8.12.8 and earlier but not before 8.12. The bug exists in the DNS map code. This feature is enabled by...

SUSE-SA:2003:040: sendmail, sendmail-tls

The remote host is missing the patch for the advisory SUSE-SA:2003:040 sendmail, sendmail-tls. sendmail is the most widely used mail transport agent MTA in the internet. A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SUSE products. These versions...

Solaris 2.5.1 (x86) : 103595-19

SunOS 5.5.1x86: sendmail fixes. Date this patch was last updated by Sun : Jun/15/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 8 (sparc) : 110615-18

SunOS 5.8: sendmail patch. Date this patch was last updated by Sun : Jan/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 7 (x86) : 107685-11

SunOS 5.7x86: sendmail patch. Date this patch was last updated by Sun : Apr/28/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 8 (x86) : 110616-18

SunOS 5.8x86: sendmail patch. Date this patch was last updated by Sun : Feb/04/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (x86) : 114137-10

SunOS 5.9x86: sendmail Patch. Date this patch was last updated by Sun : Mar/04/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (sparc) : 113575-11

SunOS 5.9: sendmail patch. Date this patch was last updated by Sun : Feb/05/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2002-1582

CVE-2002-1582 concerns Mailreader.com. The vulnerability exists in compose.cgi for Mailreader.com versions 2.3.30 and 2.3.31 when Sendmail is the MTA, where remote attackers can execute arbitrary shell commands via metacharacters in the RealEmail configuration variable used to invoke Sendmail in ...