CVE-1999-0684

Denial of service in Sendmail 8.8.6 in HPUX...

CVE-1999-0098

CVE-1999-0098 refers to a buffer overflow in the SMTP HELO command of Sendmail , as described in multiple connected sources. The issue allows a remote attacker to hide activities and potentially compromise system state by overflowing the HELO handling. Connected documents confirm the affected com...

CVE-1999-0098

Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities...

CVE-1999-0163: Undefined Security Weakness

In older versions of Sendmail, an attacker could use a pipe character to execute root commands...

CVE-1999-0661: Undefined Security Weakness

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as 1 TCP Wrappers 7.6, 2 util-linux 2.9g, 3 wuarchive ftpd wuftpd 2.2 and 2.1f, 4 IRC client ircII ircII 2.2.9, 5 OpenSSH 3.4p1, or 6 Sendmail 8.12.6...

CVE-1999-0205: Undefined Security Weakness

Denial of service in Sendmail 8.6.11 and 8.6.12...

CVE-1999-0565: Undefined Security Weakness

A Sendmail alias allows input to be piped to a program...

CVE-1999-0098: Undefined Security Weakness

Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities...

CVE-1999-0684: Undefined Security Weakness

Denial of service in Sendmail 8.8.6 in HPUX...

CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

DEBIAN-CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

CVE-1999-0769

CVE-1999-0769 affects Vixie Cron on Linux systems. The vulnerability allows local users to modify parameters of sendmail commands by manipulating the MAILTO environment variable, as described in multiple sources. Root cause is misuse of MAILTO by cron the environment passed to mail-related comman...

CVE-1999-0769

Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable...

CVE-1999-1592

Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-0129...

CVE-1999-1109

Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated...

Eric Allman Sendmail 8.9.1/8.9.3 - ETRN Denial of Service

source: https://www.securityfocus.com/bid/904/info There is a low-bandwidth dos vulnerability in Sendmail. When a client connects to the sendmail smtpd and sends an ETRN command to the server, the server forks and sleeps for 5 seconds. If many ETRN commands are sent to a server, it is possible to...

Eric Allman Sendmail 8.9.18.9.3 - ETRN Denial of Service

Eric Allman Sendmail 8.9.18.9.3 - ETRN Denial of Service source: https://www.securityfocus.com/bid/904/info There is a low-bandwidth dos vulnerability in Sendmail. When a client connects to the sendmail smtpd and sends an ETRN command to the server, the server forks and sleeps for 5 seconds. If...

5-mailbugs.txt

This mail discusses five interesting vulnerabilities in Berkeley Sendmail and 'procmail' utility, I think it's good to let you know - but don't panic - at least for now, we are too lazy and we have no idea if any of these holes can be exploited - that's why I'm sending it to VULN-DEV as well, to...

[SECURITY] New version of sendmail-wide released

The version of sendmail-wide that was distributed with Debian GNU/Linux 2.1 has a slight problem in the code to regenerate the aliases database. Sendmail allowed any user to run sendmail with the -bi option to reinitialize the aliases database. The user could then interrupt sendmail and leave the...