CVE-1999-0478

HP-UX sendmail 8.8.6 is affected by a denial-of-service condition related to accepting connections. The vulnerability is documented as CVE-1999-0478 and is associated with HP-UX 8.8.6; HP issued patch PHNE_17190 for s700_800 11.00 sendmail(1m) 8.8.6 to address this issue. The available connected ...

CVE-1999-0204

CVE-1999-0204 affects Sendmail 8.6.9. Multiple connected sources (Red Hat, PT Security, Nessus plugins) describe an ident overflow vulnerability that allows remote attackers to execute commands as root. Root-privilege impact is stated; remediation advised is upgrading to a newer Sendmail version ...

CVE-1999-0095

CVE-1999-0095 involves the Sendmail MTA where the DEBUG command is enabled, enabling remote users to execute arbitrary commands as root. Public sources (NVD/Nessus/OpenVAS/Red Hat/CIRCL) confirm that the issue allows full root access via the DEBUG/WIZ mechanism, with assessments placing the impac...

CVE-1999-0206

MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access...

CVE-1999-0129

Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file...

CVE-1999-0096

Sendmail decode alias can be used to overwrite sensitive files...

CVE-1999-0130

CVE-1999-0130 affects Sendmail 8.7.x and 8.8.x, where a local user can start the SMTP daemon in daemon mode and obtain root privileges. Multiple connected sources corroborate: OpenVAS notes local overflow in Sendmail 8.7.x/8.8.x with daemon-mode enablement; Nessus entries describe local privilege...

CVE-1999-0204

Sendmail 8.6.9 allows remote attackers to execute root commands, using ident...

CVE-1999-0478

Denial of service in HP-UX sendmail 8.8.6 related to accepting connections...

CVE-1999-0129

CVE-1999-0129 affects Sendmail and enables local privilege escalation: authenticated or local users can write to a file and gain group permissions via a ".forward" or ":include:" file. Confirmed in multiple connected documents: OpenVAS notes Sendmail 8.8.x up to 8.8.3 vulnerable to group write/fi...

CVE-1999-0057

The CVE refers to the HP-UX vacation program allowing remote command execution by sending crafted input that causes the Vacation utility to pass arbitrary parameters to sendmail. The issue is associated with HP patch PHNE_16295 for s700/s800 11.00 (HP-UX Vacation patch), indicating the remediatio...

CVE-1999-0206

CVE-1999-0206 describes a MIME buffer overflow in Sendmail versions 8.8.0 and 8.8.1 that can give root access. Connected documents corroborate: Red Hat and Nessus sources note a MIME processing overflow affecting those versions with root access consequences, and a remediation suggested is to upgr...

rootcron.txt

!/bin/sh clear echo '------------------------------------------------------------------' echo 'Marchew Hyperreal Industries ' echo 'Stumilowy Las Team ' echo '---------------------------- presents ----------------------------' echo echo ' -= vixie-cron root sploit by Michal Zalewski =-' echo echo...

Sendmail decode Alias Arbitrary File Overwrite

The remote SMTP server seems to pipe mail sent to the 'decode' alias to a program. There have been in the past a lot of security problems regarding this, as it would allow an attacker to overwrite arbitrary files on the remote server. We suggest you deactivate this alias. C Tenable Network...

Sendmail RCPT TO Command Arbitrary File Overwrite

The remote SMTP server did not complain when issued the command : MAIL FROM: root@thishost RCPT TO: /tmp/nessustest This probably means that it is possible to send mail directly to files, which is a serious threat, since this allows anyone to overwrite any file on the remote server. This security...

CVE-1999-0769

Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable...

Caldera OpenLinux 2.2 Debian 2.12.2 RedHat 6.0 - Vixie Cron MAILTO Sendmail

Caldera OpenLinux 2.2 Debian 2.12.2 RedHat 6.0 - Vixie Cron MAILTO Sendmail Caldera OpenLinux 2.2 ,Debian Linux 2.1/2.2,RedHat Linux = 6.0 Vixie Cron MAILTO Sendmail Vulnerability source: https://www.securityfocus.com/bid/611/info Failure by the vixie cron daemon from validating the contents of a...

Caldera OpenLinux 2.2 / Debian 2.1/2.2 / RedHat 6.0 - Vixie Cron MAILTO Sendmail

Caldera OpenLinux 2.2 ,Debian Linux 2.1/2.2,RedHat Linux = 6.0 Vixie Cron MAILTO Sendmail Vulnerability source: https://www.securityfocus.com/bid/611/info Failure by the vixie cron daemon from validating the contents of a user supplied environment variable allow a malicious users to pass arbitrar...

Sendmail Redirection Relaying Allowed

The remote sendmail server accepts messages addressed to recipients of the form 'user@[email protected]'. A remote attacker could leverage this to reach mail servers behind a firewall or to avoid detection by routing mail through the affected host. C Tenable Network Security, Inc...

Sendmail mail from/rcpt to Pipe Arbitrary Command Execution

The remote SMTP server did not complain when issued the command : MAIL FROM: root@thishost RCPT TO: |testing This probably means that it is possible to send mail directly to programs, which is a serious threat, since this allows anyone to execute arbitrary commands on this host. This security hol...