Sendmail .forward File Local Privilege Escalation

Binary data 2009.prm...

Sendmail < 8.10.1 ETRN Command Remote DoS

Binary data 2024.prm...

Sendmail < 8.8.3 mime7to8 Function Overflow

Binary data 2014.prm...

Sendmail ResrictQueueRun Debug Information Disclosure

Binary data 2027.prm...

Sendmail < 8.7.6 GECOS Field Local Overflow DoS

Binary data 2044.prm...

Sendmail .forward File Local Privilege Escalation

Binary data 2010.prm...

Sendmail SMTP Server Detection

Binary data 2046.prm...

Sendmail DEBUG Arbitrary Command Execution

Binary data 2028.prm...

Sendmail < 8.8.3 Local Overflow

Binary data 2029.prm...

Sendmail < 8.13.2 Remote Overflow

Binary data 5025.prm...

Sendmail < 8.6.10 IDENT Remote Overflow

Binary data 2019.prm...

Sendmail < 8.8.5 MIME Conversion Malformed Header Overflow

Binary data 2013.prm...

Sendmail HELO Command Overflow

Binary data 2032.prm...

Mandrake Linux Security Advisory : sendmail (MDKSA-2003:028)

A vulnerability was discovered in sendmail by Mark Dowd of ISS X-Force that involves mail header manipulation that can result in a remote user gaining root access to the system running the vulnerable sendmail. Patches supplied by the sendmail development team have been applied to correct this...

Mandrake Linux Security Advisory : sendmail (MDKSA-2002:083)

A vulnerability was discovered by zen-parse and Pedram Amini in the sendmail MTA. They found two ways to exploit smrsh, an application intended as a replacement for the sh shell for use with sendmail; the first by inserting specially formatted commands in the /.forward file and secondly by callin...

Mandrake Linux Security Advisory : sendmail (MDKSA-2003:086)

A vulnerability was discovered in all 8.12.x versions of sendmail up to and including 8.12.8. Due to wrong initialization of RESOURCERECORDT structures, if sendmail receives a bad DNS reply it will call free on random addresses which usually causes sendmail to crash. These updated packages are...

Mandrake Linux Security Advisory : sendmail (MDKSA-2001:075)

An input validation error exists in sendmail that may allow local users to write arbitrary data to process memory. This could possibly allow the execute of code or commands with elevated privileges and may also allow a local attacker to gain access to the root account. %NASLMINLEVEL 70300 C Tenab...

Mandrake Linux Security Advisory : sendmail (MDKSA-2003:092)

A buffer overflow vulnerability was discovered in the address parsing code in all versions of sendmail prior to 8.12.10 by Michal Zalewski, with a patch to fix the problem provided by Todd C. Miller. This vulnerability seems to be remotely exploitable on Linux systems running on the x86 platform;...

Mandrake Linux Security Advisory : sendmail (MDKSA-2003:042-1)

Michal Zalweski discovered a vulnerability in sendmail versions earlier than 8.12.9 in the address parser, which performs insufficient bounds checking in certain conditions due to a char to int conversion. This vulnerability makes it poissible for an attacker to take control of sendmail and is...

SUSE-SA:2003:013: sendmail, sendmail-tls

The remote host is missing the patch for the advisory SUSE-SA:2003:013 sendmail, sendmail-tls. sendmail is the most widely used mail transport agent MTA in the internet. A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SUSE products. These versions...