CVE-1999-0129

Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file...

CVE-1999-0478

Denial of service in HP-UX sendmail 8.8.6 related to accepting connections...

CVE-1999-0206

MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access...

CVE-1999-0204

Sendmail 8.6.9 allows remote attackers to execute root commands, using ident...

CVE-1999-0096

Sendmail decode alias can be used to overwrite sensitive files...

CVE-1999-0130

CVE-1999-0130 affects Sendmail 8.7.x and 8.8.x, where a local user can start the SMTP daemon in daemon mode and obtain root privileges. Multiple connected sources corroborate: OpenVAS notes local overflow in Sendmail 8.7.x/8.8.x with daemon-mode enablement; Nessus entries describe local privilege...

CVE-1999-0095

CVE-1999-0095 involves the Sendmail MTA where the DEBUG command is enabled, enabling remote users to execute arbitrary commands as root. Public sources (NVD/Nessus/OpenVAS/Red Hat/CIRCL) confirm that the issue allows full root access via the DEBUG/WIZ mechanism, with assessments placing the impac...

CVE-1999-0131: Undefined Security Weakness

Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users...

CVE-1999-0095: Undefined Security Weakness

The debug command in Sendmail is enabled, allowing attackers to execute commands as root...

CVE-1999-0047: Undefined Security Weakness

MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4...

CVE-1999-0096: Undefined Security Weakness

Sendmail decode alias can be used to overwrite sensitive files...

CVE-1999-0206: Undefined Security Weakness

MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access...

CVE-1999-0130: Undefined Security Weakness

Local users can start Sendmail in daemon mode and gain root privileges...

CVE-1999-0057: Undefined Security Weakness

Vacation program allows command execution by remote users through a sendmail command...

CVE-1999-0204: Undefined Security Weakness

Sendmail 8.6.9 allows remote attackers to execute root commands, using ident...

CVE-1999-0129: Undefined Security Weakness

Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file...

CVE-1999-0478: Undefined Security Weakness

Denial of service in HP-UX sendmail 8.8.6 related to accepting connections...

rootcron.txt

!/bin/sh clear echo '------------------------------------------------------------------' echo 'Marchew Hyperreal Industries ' echo 'Stumilowy Las Team ' echo '---------------------------- presents ----------------------------' echo echo ' -= vixie-cron root sploit by Michal Zalewski =-' echo echo...

Sendmail decode Alias Arbitrary File Overwrite

The remote SMTP server seems to pipe mail sent to the 'decode' alias to a program. There have been in the past a lot of security problems regarding this, as it would allow an attacker to overwrite arbitrary files on the remote server. We suggest you deactivate this alias. C Tenable Network...

Sendmail RCPT TO Command Arbitrary File Overwrite

The remote SMTP server did not complain when issued the command : MAIL FROM: root@thishost RCPT TO: /tmp/nessustest This probably means that it is possible to send mail directly to files, which is a serious threat, since this allows anyone to overwrite any file on the remote server. This security...