CVE-1999-0418

CVE-1999-0418 is a denial-of-service issue in SMTP applications (notably Sendmail) where a remote attacker floods a connection with many RCPT TO commands. The underlying effect is resource exhaustion leading to service disruption. Documents confirm the vulnerability and its generic impact but do ...

CVE-1999-1506

The CVE-1999-1506 entry affects SMI Sendmail versions 4.0 and earlier on SunOS up to 4.0.3. The vulnerability allows remote attackers to access user bin, indicating an unauthorized access flaw in the Sendmail implementation. The connected PT-1990-1008 entry confirms the exact affected software an...

FreeBSD-SA-01:57.sendmail

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:57 Security Advisory FreeBSD, Inc. Topic: sendmail contains local root vulnerability REVISED Category: core Module: sendmail Announced: 2001-08-27 Revised: 2001-08-30...

Sendmail < 8.11.6 -d category Value Local Overflow

The remote Sendmail server, according to its version number, may be vulnerable to a local buffer overflow allowing local users to gain root privileges. C Tenable Network Security, Inc. References also vulnerable to a heap overflow Date: Mon, 28 May 2001 18:16:57 -0400 EDT From: "Michal Zalewski"...

CVE-2001-0588

sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command...

Ошибки в sendmail debug &#40;signed/unsigned&#41;

при использовании ключа -d используется знаковое число после присвоения ему беззнакового значения в качестве индекса массива, что позволяет адресовать отрицательное смещение...

*ALERT* UPDATED BID 3163 &#40;URGENCY 6.58&#41;: Sendmail Debugger Arbitrary Code Execution Vulnerability &#40;fwd&#41;

This alert is being posted to Bugtraq as our public release of the vulnerability discovered in Sendmail by Cade Cairns [email protected]. --------------------------------------------------------------------------- Security Alert Subject: Sendmail Debugger Arbitrary Code Execution...

Sendmail 8.118.12 Debugger - Arbitrary Code Execution (2)

Sendmail 8.118.12 Debugger - Arbitrary Code Execution 2 // source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for...

Sendmail 8.118.12 Debugger - Arbitrary Code Execution (4)

Sendmail 8.118.12 Debugger - Arbitrary Code Execution 4 source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for...

Sendmail 8.118.12 Debugger - Arbitrary Code Execution (1)

Sendmail 8.118.12 Debugger - Arbitrary Code Execution 1 // source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for...

Sendmail 8.118.12 Debugger - Arbitrary Code Execution (3)

Sendmail 8.118.12 Debugger - Arbitrary Code Execution 3 source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for...

Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (4)

source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for processing arguments supplied from the command line with t...

Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (1)

// source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for processing arguments supplied from the command line wit...

Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (2)

// source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for processing arguments supplied from the command line wit...

Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (3)

source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for processing arguments supplied from the command line with t...

sendmail.php.txt

Sequoiasoft's sendmail php script dangerous - By jwilkins PHP-Nuke Written by Sequioa Software, this script allows execution of arbitrary code by a malicious user. Written by Sequioa Software, this script allows execution of arbitrary code by a malicious user. Essentially, popen executes a shell...

CVE-2001-0588

sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command...

CVE-2001-0588

CVE-2001-0588 affects sendmail 8.9.3 included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6. A local attacker can gain additional privileges via a buffer overflow in the first argument to the command. The root cause is a buffer overflow in handling the first argument, leading to partial c...

poprelayd and sendmail relay authentication problem &#40;Cobalt Raq3&#41;

Hi to all, Poprelayd is a simple script that scan /var/log/maillog for valid pop logins and updates a hash db used by sendmail to permit relaying for those valid pop users, this method is called "Pop-before-smtp". The syslog string searched by the script is in this form for the qpop server /POP...

SECURITY.NNOV: KAV &#40;AVP&#41; for sendmail format string vulnerability

Hello , Topic: Format string vulnerability in AVP for sendmail Author: 3APA3A [email protected] Affected Software: KAV for sendmail 3.5.135.2 Vendor: Kaspersky Lab Vendor Notified: 30 May 2001 Risk: High/Average Remotely Exploitable: Yes Impact: DoS/Remote root compromise Released: 06 June...