Sendmail <= 8.12.8 prescan() BSD Remote Root Exploit

Exploit for linux platform in category remote exploits ==================================================== Sendmail include include include include include include include include int maxarch=1; struct arch char os; // The OS int pos; // The position of ebp in the stack, with the last byte being...

Sendmail 8.12.8 (BSD) - Prescan() Remote Command Execution

Sendmail 8.12.8 BSD - Prescan Remote Command Execution / Sendmail 8.12.8 prescan PROOF OF CONCEPT exploit by bysin This is to prove that the bug in sendmail 8.12.8 and below is vulnerable. On sucessful POC exploitation the program should crash with the following: Program received signal SIGSEGV,...

Sendmail 8.12.8 (BSD) - 'Prescan()' Remote Command Execution

/ Sendmail 8.12.8 prescan PROOF OF CONCEPT exploit by bysin This is to prove that the bug in sendmail 8.12.8 and below is vulnerable. On sucessful POC exploitation the program should crash with the following: Program received signal SIGSEGV, Segmentation fault. 0x5c5c5c5c in ?? / include include...

[SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 290-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 290-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...

DSA-290 sendmail-wide - char-to-int conversion

Bulletin has no description...

[SECURITY] [DSA 278-2] New sendmail packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 278-2 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 278-2] New sendmail packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 278-2 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 278-1] New sendmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 278-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 278-1] New sendmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 278-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2003 http://www.debian.org/security/faq -...

DSA-278 sendmail - char-to-int conversion

Bulletin has no description...

CVE-1999-1468

CVE-1999-1468 affects rdist in various UNIX systems. The vulnerability arises when rdist uses popen to invoke sendmail, enabling local users to gain root privileges by modifying the IFS (Internal Field Separator) variable. The provided sources confirm the component and the privileged escalation v...

CVE-2001-1349

CVE-2001-1349 affects Sendmail before 8.11.4 and before 8.12.0.Beta10; the issue is described as local denial of service with possible heap corruption and privilege escalation due to race conditions in signal handlers. OpenVAS additionally notes a remote header buffer overflow for Sendmail 5.79–8...

CVE-2002-0906

Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server...

CVE-2001-1349

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers...

CVE-2002-0906

CVE-2002-0906 describes a buffer overflow in Sendmail before 8.12.5 when configured to use a custom DNS map to query TXT records. A malicious DNS server could trigger the overflow, allowing a remote attacker to cause a denial of service and, potentially, execute arbitrary code on the affected hos...

CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

DEBIAN-CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

CVE-2002-0906

Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server...