1654 matches found
CVE-1999-0047
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4...
CVE-1999-0163
In older versions of Sendmail, an attacker could use a pipe character to execute root commands...
AZL-7358 CVE-1999-0163 affecting package sendmail 8.15.2-46
In older versions of Sendmail, an attacker could use a pipe character to execute root commands...
CVE-1999-0204
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident...
PT-1997-1070 · Sendmail · Sendmail
Name of the Vulnerable Software and Affected Versions: Sendmail versions prior to the fixed version Description: The issue allows an attacker to execute root commands using a pipe character. Recommendations: For versions prior to the fixed version, update to the fixed version to resolve the issue...
PT-1997-1095 · Sendmail · Sendmail
Name of the Vulnerable Software and Affected Versions: Sendmail version 8.6.9 Description: The issue allows remote attackers to execute root commands using ident. Recommendations: For Sendmail version 8.6.9, update to a newer version that contains a fix for this issue...
CVE-1999-0096
Sendmail decode alias can be used to overwrite sensitive files...
CVE-1999-0129
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file...
PT-1996-1019 · Sendmail · Sendmail
Name of the Vulnerable Software and Affected Versions: Sendmail affected versions not specified Description: The issue allows local users to write to a file and gain group permissions via a .forward or :include: file. Recommendations: At the moment, there is no information about a newer version...
CVE-1999-0130
Local users can start Sendmail in daemon mode and gain root privileges...
BSD 2 / CND 1 / Sendmail 8.x / FreeBSD 2.1.x / HP-UX 10.x / AIX 4 / RedHat 4 - Sendmail Daemon
BSD/OS 2.1,Caldera Network Desktop 1.0,Eric Allman Sendmail = 8.8.2,FreeBSD 2.1.5/2.1.6,HP-UX = 10.20,AIX 4.2,RedHat 4.0 Sendmail Daemon Mode Vulnerability source: https://www.securityfocus.com/bid/716/info Sendmail is often run in daemon mode so that it can "listen" for incoming mail connections...
BSD 2 CND 1 Sendmail 8.x FreeBSD 2.1.x HP-UX 10.x AIX 4 RedHat 4 - Sendmail Daemon
BSD 2 CND 1 Sendmail 8.x FreeBSD 2.1.x HP-UX 10.x AIX 4 RedHat 4 - Sendmail Daemon BSD/OS 2.1,Caldera Network Desktop 1.0,Eric Allman Sendmail = 8.8.2,FreeBSD 2.1.5/2.1.6,HP-UX = 10.20,AIX 4.2,RedHat 4.0 Sendmail Daemon Mode Vulnerability source: https://www.securityfocus.com/bid/716/info Sendmai...
CVE-1999-0206
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access...
PT-1996-1033 · Sendmail · Sendmail
Name of the Vulnerable Software and Affected Versions: Sendmail versions 8.8.0 through 8.8.1 Description: A buffer overflow issue in the MIME processing of Sendmail allows for root access. Recommendations: For Sendmail versions 8.8.0 and 8.8.1, update to a version that fixes this issue. At the...
CVE-1999-0131
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users...
CVE-1999-1309
Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug -d command line option...
FreeBSD-SA-96:03.sendmail-suggestion
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:03 Security Advisory FreeBSD, Inc. Topic: suggested action only sendmail smrsh now available Category: core Module: sendmail Announced: 1996-04-20 Affects: FreeBSD 2.1.0...
CVE-1999-1580
SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS Internal Field Separator variable and passing crafted values to the -oR option...
CVE-1999-0203
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program...
PT-1995-1011 · Sendmail · Sendmail
Name of the Vulnerable Software and Affected Versions: Sendmail affected versions not specified Description: The issue allows attackers to gain root privileges via SMTP by specifying an improper mail from address and an invalid rcpt to address that would cause the mail to bounce to a program...