1651 matches found
Eric Allman Sendmail 8.8.x - Socket Hijack
// source: https://www.securityfocus.com/bid/774/info Through exploiting a combination of seemingly low-risk vulnerabilities in sendmail, it is possible for a malicious local user to have an arbitrary program inherit or "hijack" the file descriptor for the socket listening on priviliged port 25...
upgrade.sendmail.8x.txt
Seems to me there's something really bad about software vendors. First of all, if author of program finds bug in it - even when this bug seems to be nasty - very often, he'll silently fix it, even without mentioning it in CHANGES blessed those who put there text like 'some security fixes', at lea...
CVE-1999-0047
Sendmail MIME conversion overflow CVE-1999-0047 affects versions 8.8.3 and 8.8.4. The vulnerability, described as a MIME conversion overflow, can allow an attacker to execute arbitrary commands as root on a remote host. Remediation: upgrade to Sendmail 8.8.5 or later. This entry is supported by m...
CVE-1999-0096
CVE-1999-0096 concerns Sendmail where the decode alias mechanism can be abused to overwrite sensitive files. The connected documents provide concrete details: the issue arises from a misconfigured decode alias that pipes mail to a program, enabling arbitrary file overwrites on the remote server. ...
CVE-1999-0131
CVE-1999-0131 affects Sendmail up to version 8.7.5 and earlier, where a vulnerability in the GECOS field processing can cause a buffer overflow and denial of service that may grant root access to local users. Publicly documented by Red Hat and OpenVAS entries, as well as CVE records, the vulnerab...
CVE-1999-0057
Vacation program allows command execution by remote users through a sendmail command...
CVE-1999-0130
Local users can start Sendmail in daemon mode and gain root privileges...
CVE-1999-0047
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4...
CVE-1999-0478
HP-UX sendmail 8.8.6 is affected by a denial-of-service condition related to accepting connections. The vulnerability is documented as CVE-1999-0478 and is associated with HP-UX 8.8.6; HP issued patch PHNE_17190 for s700_800 11.00 sendmail(1m) 8.8.6 to address this issue. The available connected ...
CVE-1999-0095
The debug command in Sendmail is enabled, allowing attackers to execute commands as root...
CVE-1999-0204
CVE-1999-0204 affects Sendmail 8.6.9. Multiple connected sources (Red Hat, PT Security, Nessus plugins) describe an ident overflow vulnerability that allows remote attackers to execute commands as root. Root-privilege impact is stated; remediation advised is upgrading to a newer Sendmail version ...
CVE-1999-0131
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users...
CVE-1999-0057
The CVE refers to the HP-UX vacation program allowing remote command execution by sending crafted input that causes the Vacation utility to pass arbitrary parameters to sendmail. The issue is associated with HP patch PHNE_16295 for s700/s800 11.00 (HP-UX Vacation patch), indicating the remediatio...
CVE-1999-0095
CVE-1999-0095 involves the Sendmail MTA where the DEBUG command is enabled, enabling remote users to execute arbitrary commands as root. Public sources (NVD/Nessus/OpenVAS/Red Hat/CIRCL) confirm that the issue allows full root access via the DEBUG/WIZ mechanism, with assessments placing the impac...
CVE-1999-0478
Denial of service in HP-UX sendmail 8.8.6 related to accepting connections...
CVE-1999-0206
CVE-1999-0206 describes a MIME buffer overflow in Sendmail versions 8.8.0 and 8.8.1 that can give root access. Connected documents corroborate: Red Hat and Nessus sources note a MIME processing overflow affecting those versions with root access consequences, and a remediation suggested is to upgr...
CVE-1999-0130
CVE-1999-0130 affects Sendmail 8.7.x and 8.8.x, where a local user can start the SMTP daemon in daemon mode and obtain root privileges. Multiple connected sources corroborate: OpenVAS notes local overflow in Sendmail 8.7.x/8.8.x with daemon-mode enablement; Nessus entries describe local privilege...
CVE-1999-0204
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident...