CVE-1999-0565

A Sendmail alias allows input to be piped to a program...

CVE-1999-0098

CVE-1999-0098 refers to a buffer overflow in the SMTP HELO command of Sendmail , as described in multiple connected sources. The issue allows a remote attacker to hide activities and potentially compromise system state by overflowing the HELO handling. Connected documents confirm the affected com...

CVE-1999-0163

In older versions of Sendmail, an attacker could use a pipe character to execute root commands...

CVE-1999-0205

Denial of service in Sendmail 8.6.11 and 8.6.12...

CVE-1999-0661

CVE-1999-0661 involves multiple widely-used packages (TCP Wrappers 7.6, util-linux 2.9g, wuftpd 2.2 and 2.1f, ircII 2.2.9, OpenSSH 3.4p1, Sendmail 8.12.6) that were replaced at distribution points by a Trojan Horse. The Red Hat advisory and other records corroborate the same core issue: compromis...

CVE-1999-0661

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as 1 TCP Wrappers 7.6, 2 util-linux 2.9g, 3 wuarchive ftpd wuftpd 2.2 and 2.1f, 4 IRC client ircII ircII 2.2.9, 5 OpenSSH 3.4p1, or 6 Sendmail 8.12.6...

CVE-1999-0684

Denial of service in Sendmail 8.8.6 in HPUX...

CVE-1999-0684

CVE-1999-0684 corresponds to a Denial of Service in Sendmail 8.8.6 running on HP-UX. Public references in the connected records confirm affected software is Sendmail 8.8.6 and note a DoS impact. A patch exists (HP PHNE_17190) addressing 8.8.6 on s700/s800 HP-UX 11.00, as cited by the Nessus plugi...

CVE-1999-0098

Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities...

CVE-1999-0565

CVE-1999-0565 affects Sendmail: a mail alias can cause input to be piped to an external program, enabling potential command execution. Documents confirm the issue but do not specify affected versions or a fix; one PT-security entry notes no information about a newer version containing a patch. No...

CVE-1999-0205

CVE-1999-0205 affects Sendmail 8.6.11 and 8.6.12 and causes a Denial of Service. The connected documents confirm the affected software/versions and describe a DoS condition but do not provide a detailed root cause in the available text. Remediation guidance present in PT-1999-1013: update to a ve...

CVE-1999-0163

CVE-1999-0163 affects older Sendmail versions. An attacker could use a pipe character to execute root commands, enabling local privilege escalation. Affected data shows multiple advisories citing Sendmail with this pipe-based command execution, including references to specific package versions (e...

CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

DEBIAN-CVE-2000-1220

The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...

CVE-1999-0769

Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable...

CVE-1999-0769

CVE-1999-0769 affects Vixie Cron on Linux systems. The vulnerability allows local users to modify parameters of sendmail commands by manipulating the MAILTO environment variable, as described in multiple sources. Root cause is misuse of MAILTO by cron the environment passed to mail-related comman...

CVE-1999-1592

Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-0129...

CVE-1999-1109

Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated...

Eric Allman Sendmail 8.9.1/8.9.3 - ETRN Denial of Service

source: https://www.securityfocus.com/bid/904/info There is a low-bandwidth dos vulnerability in Sendmail. When a client connects to the sendmail smtpd and sends an ETRN command to the server, the server forks and sleeps for 5 seconds. If many ETRN commands are sent to a server, it is possible to...