1808 matches found
[SECURITY] Updated i386 package for sendmail
The version of sendmail that was listed in the earlier advisory today was compiled with the wrong version of libc. This has been corrected in version 8.9.3-3slink1.0.1 . wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Intel ia32 architecture:...
[SECURITY] New version of sendmail released
The version of sendmail that was distributed with Debian GNU/Linux 2.1 has a slight problem in the code to regenerate the aliases database. Sendmail allowed any user to run sendmail with the -bi option to reinitialize the aliases database. The user could then interrupt sendmail and leave the syst...
CVE-1999-0976
Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail...
[SECURITY] Updated i386 package for sendmail
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 7, 1999 - ------------------------------------------------------------------------ The version of sendmail that was...
[SECURITY] New version of sendmail released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 7, 1999 - ------------------------------------------------------------------------ The version of sendmail that was...
[SECURITY] New version of sendmail-wide released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 7, 1999 - ------------------------------------------------------------------------ The version of sendmail-wide that was...
upgrade.sendmail.8x.txt
Seems to me there's something really bad about software vendors. First of all, if author of program finds bug in it - even when this bug seems to be nasty - very often, he'll silently fix it, even without mentioning it in CHANGES blessed those who put there text like 'some security fixes', at lea...
Eric Allman Sendmail 8.8.x - Socket Hijack
// source: https://www.securityfocus.com/bid/774/info Through exploiting a combination of seemingly low-risk vulnerabilities in sendmail, it is possible for a malicious local user to have an arbitrary program inherit or "hijack" the file descriptor for the socket listening on priviliged port 25...
Eric Allman Sendmail 8.8.x - Socket Hijack
Eric Allman Sendmail 8.8.x - Socket Hijack // source: https://www.securityfocus.com/bid/774/info Through exploiting a combination of seemingly low-risk vulnerabilities in sendmail, it is possible for a malicious local user to have an arbitrary program inherit or "hijack" the file descriptor for t...
CVE-1999-0096
CVE-1999-0096 concerns Sendmail where the decode alias mechanism can be abused to overwrite sensitive files. The connected documents provide concrete details: the issue arises from a misconfigured decode alias that pipes mail to a program, enabling arbitrary file overwrites on the remote server. ...
CVE-1999-0129
CVE-1999-0129 affects Sendmail and enables local privilege escalation: authenticated or local users can write to a file and gain group permissions via a ".forward" or ":include:" file. Confirmed in multiple connected documents: OpenVAS notes Sendmail 8.8.x up to 8.8.3 vulnerable to group write/fi...
CVE-1999-0130
CVE-1999-0130 affects Sendmail 8.7.x and 8.8.x, where a local user can start the SMTP daemon in daemon mode and obtain root privileges. Multiple connected sources corroborate: OpenVAS notes local overflow in Sendmail 8.7.x/8.8.x with daemon-mode enablement; Nessus entries describe local privilege...
CVE-1999-0204
CVE-1999-0204 affects Sendmail 8.6.9. Multiple connected sources (Red Hat, PT Security, Nessus plugins) describe an ident overflow vulnerability that allows remote attackers to execute commands as root. Root-privilege impact is stated; remediation advised is upgrading to a newer Sendmail version ...
CVE-1999-0047
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4...
CVE-1999-0096
Sendmail decode alias can be used to overwrite sensitive files...
CVE-1999-0129
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file...
CVE-1999-0130
Local users can start Sendmail in daemon mode and gain root privileges...
CVE-1999-0204
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident...