1635 matches found
[SECURITY] Updated i386 package for sendmail
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 7, 1999 - ------------------------------------------------------------------------ The version of sendmail that was...
[SECURITY] New version of sendmail-wide released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 7, 1999 - ------------------------------------------------------------------------ The version of sendmail-wide that was...
[SECURITY] New version of sendmail released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 7, 1999 - ------------------------------------------------------------------------ The version of sendmail that was...
Eric Allman Sendmail 8.8.x - Socket Hijack
Eric Allman Sendmail 8.8.x - Socket Hijack // source: https://www.securityfocus.com/bid/774/info Through exploiting a combination of seemingly low-risk vulnerabilities in sendmail, it is possible for a malicious local user to have an arbitrary program inherit or "hijack" the file descriptor for t...
upgrade.sendmail.8x.txt
Seems to me there's something really bad about software vendors. First of all, if author of program finds bug in it - even when this bug seems to be nasty - very often, he'll silently fix it, even without mentioning it in CHANGES blessed those who put there text like 'some security fixes', at lea...
Eric Allman Sendmail 8.8.x - Socket Hijack
// source: https://www.securityfocus.com/bid/774/info Through exploiting a combination of seemingly low-risk vulnerabilities in sendmail, it is possible for a malicious local user to have an arbitrary program inherit or "hijack" the file descriptor for the socket listening on priviliged port 25...
CVE-1999-0047
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4...
CVE-1999-0057
The CVE refers to the HP-UX vacation program allowing remote command execution by sending crafted input that causes the Vacation utility to pass arbitrary parameters to sendmail. The issue is associated with HP patch PHNE_16295 for s700/s800 11.00 (HP-UX Vacation patch), indicating the remediatio...
CVE-1999-0206
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access...
CVE-1999-0131
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users...
CVE-1999-0129
CVE-1999-0129 affects Sendmail and enables local privilege escalation: authenticated or local users can write to a file and gain group permissions via a ".forward" or ":include:" file. Confirmed in multiple connected documents: OpenVAS notes Sendmail 8.8.x up to 8.8.3 vulnerable to group write/fi...
CVE-1999-0478
HP-UX sendmail 8.8.6 is affected by a denial-of-service condition related to accepting connections. The vulnerability is documented as CVE-1999-0478 and is associated with HP-UX 8.8.6; HP issued patch PHNE_17190 for s700_800 11.00 sendmail(1m) 8.8.6 to address this issue. The available connected ...
CVE-1999-0206
CVE-1999-0206 describes a MIME buffer overflow in Sendmail versions 8.8.0 and 8.8.1 that can give root access. Connected documents corroborate: Red Hat and Nessus sources note a MIME processing overflow affecting those versions with root access consequences, and a remediation suggested is to upgr...
CVE-1999-0095
The debug command in Sendmail is enabled, allowing attackers to execute commands as root...
CVE-1999-0204
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident...
CVE-1999-0130
Local users can start Sendmail in daemon mode and gain root privileges...
CVE-1999-0129
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file...
CVE-1999-0478
Denial of service in HP-UX sendmail 8.8.6 related to accepting connections...
CVE-1999-0096
CVE-1999-0096 concerns Sendmail where the decode alias mechanism can be abused to overwrite sensitive files. The connected documents provide concrete details: the issue arises from a misconfigured decode alias that pipes mail to a program, enabling arbitrary file overwrites on the remote server. ...