261 matches found
Sendmail RCPT TO Command Arbitrary File Overwrite
The remote SMTP server did not complain when issued the command : MAIL FROM: root@thishost RCPT TO: /tmp/nessustest This probably means that it is possible to send mail directly to files, which is a serious threat, since this allows anyone to overwrite any file on the remote server. This security...
Sendmail Redirection Relaying Allowed
The remote sendmail server accepts messages addressed to recipients of the form 'user@[email protected]'. A remote attacker could leverage this to reach mail servers behind a firewall or to avoid detection by routing mail through the affected host. C Tenable Network Security, Inc...
Sendmail mail from/rcpt to Pipe Arbitrary Command Execution
The remote SMTP server did not complain when issued the command : MAIL FROM: root@thishost RCPT TO: |testing This probably means that it is possible to send mail directly to programs, which is a serious threat, since this allows anyone to execute arbitrary commands on this host. This security hol...
Linux Kernel 2.0 Sendmail - Denial of Service
Linux Kernel 2.0 Sendmail - Denial of Service / source: https://www.securityfocus.com/bid/363/info The 2.0.x kernels have a quirk in the TCP implementation that have to do with the accept call returning after only a syn has been recieved as opposed to the three way handshake having been completed...
Linux Kernel 2.0 Sendmail - Denial of Service
/ source: https://www.securityfocus.com/bid/363/info The 2.0.x kernels have a quirk in the TCP implementation that have to do with the accept call returning after only a syn has been recieved as opposed to the three way handshake having been completed. Sendmail, which is compiled on many unices,...
CVE-1999-0205
Denial of service in Sendmail 8.6.11 and 8.6.12...
Sendmail 8.9.2 - Headers Prescan Denial of Service
Sendmail 8.9.2 - Headers Prescan Denial of Service / against.c - Another Sendmail and pine ;- DoS up to 8.9.2 c 1999 by Usage: ./against existinguseronvictimhost victimhost Example: ./against nobody lamers.net / include include include include include include include include include include inclu...
Sendmail 8.9.2 - Headers Prescan Denial of Service
/ against.c - Another Sendmail and pine ;- DoS up to 8.9.2 c 1999 by Usage: ./against existinguseronvictimhost victimhost Example: ./against nobody lamers.net / include include include include include include include include include include include include include define MAXCONN 4 define LINES...
CVE-1999-0478
Denial of service in HP-UX sendmail 8.8.6 related to accepting connections...
CVE-1999-0098
Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities...
CVE-1999-0047
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4...
CVE-1999-0163
In older versions of Sendmail, an attacker could use a pipe character to execute root commands...
CVE-1999-0204
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident...
CVE-1999-0129
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file...
CVE-1999-0130
Local users can start Sendmail in daemon mode and gain root privileges...
CVE-1999-0131
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users...
Sendmail IDENT Remote root Vulnerability
Description A vulnerability in the IDENT function of sendmail 8.6.9 allows attackers to obtain remote root access. Very little other information on this vulnerability is currently available; this is an old vulnerability. Technologies Affected Eric Allman Sendmail 8.6.9 Upgrade to at least version...
Sendmail 8.6.9 IDENT - Remote Command Execution
Sendmail 8.6.9 IDENT - Remote Command Execution source: https://www.securityfocus.com/bid/2311/info A vulnerability in the IDENT function of sendmail 8.6.9 allows attackers to obtain remote root access. Very little other information on this vulnerability is currently available; this is an old...
