Sendmail DEBUG/WIZ Remote Command Execution

Your MTA accepts the DEBUG or WIZ command. It may be an old version of Sendmail. This command is dangerous as it allows remote users to execute arbitrary commands as root without the need to log in. C Tenable Network Security, Inc. MA 2004-12-29: I merge sendmailwiz.nasl into this one...

Multiple MTA HELO Command Remote Overflow

The remote SMTP server seems to allow remote users to send mail anonymously by providing arguments that are too long to the HELO command more than 1024 chars. This problem may allow malicious users to send unsolicited mail i.e., SPAM or threatening mail using the server, and keep their anonymity....

sendmail-x.x.x-DoS.txt

Date: Sun, 6 Sep 1998 00:53:24 +0200 From: Michal Zalewski To: [email protected] Subject: Sendmail, lynx, Netscape, sshd, Linux kernel twice // greetings to kotka : // ...and everyone who could stand this post Hello boys and girls - probably everyone yearn after me : So I decided to publish so...

poc.mail.local.txt

Proof of Concept - Security Advisory 02/15/99 http://poc.csoft.net Released by [email protected] [email protected] --- Affected Program mail.local Berkeley Sendmail Description Local mailer forward mail to mailboxes Severity Mailbox compromise Synopsis: mail.local is a small program distributed wit...

hp.sendmail.8.8.6.DoS.txt

Date: Mon, 26 Apr 1999 14:46:41 -0700 PDT From: CIAC Mail User To: [email protected] Subject: CIAC Bulletin J-040: HP-UX Security Vulnerability in sendmail For Public Release -----BEGIN PGP SIGNED MESSAGE----- The U.S. Department of Energy Computer Incident Advisory Capability / | /\...

sendmail.8.9.1-2.txt

Date: Thu, 24 Sep 1998 10:14:06 -0400 From: Simon Smith This is not the same attack as the last one regarding the "". This one does not make your system hang but rather alters permissions is seems. If this was already posted please disregard it...

sendmail.8.9.1.DoS.txt

Date: Thu, 1 Apr 1999 14:00:16 +0000 From: Lukasz Luzar To: [email protected] Subject: Possible local DoS in sendmail Hi, It seems that sendmail ran with -t option does NOT block SIGINT ... In that moment while we are sending data to its stdin, when we will press CTRL-C process is being killed...

mail87.sh

/bin/sh Hi ! This is exploit for sendmail smtpd bug ver. 8.7-8.8.2 for FreeBSD, Linux and may be other platforms. This shell script does a root shell in /tmp directory. If you have any problems with it, drop me a letter. Have fun ! ----------------------...

sendmail-8.8.x-8.9.x.txt

Date: Sat, 12 Dec 1998 02:22:10 +0100 From: Michal Zalewski To: [email protected] Subject: Sendmail 8.8.x/8.9.x bugware Bottoms up! Two bugs and fixes - Sendmail 8.8.x/8.9.x. 1. Redirection attack Due to strange address parsing policy briefly: if address ends with local hostname, trim it and...

sun.sendmail.security.txt

Date: Mon, 7 Jun 1999 13:56:23 -0700 From: Sun Security Coordination Team To: [email protected] Subject: Sun Security Bulletin 00187 -----BEGIN PGP SIGNED MESSAGE----- Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00187 Date: June 7, 1999 Cross-Ref: Title: Version 8.8.8 Sendmail f...

Linux Kernel 2.0 Sendmail - Denial of Service

Linux Kernel 2.0 Sendmail - Denial of Service / source: https://www.securityfocus.com/bid/363/info The 2.0.x kernels have a quirk in the TCP implementation that have to do with the accept call returning after only a syn has been recieved as opposed to the three way handshake having been completed...

Linux Kernel 2.0 Sendmail - Denial of Service

/ source: https://www.securityfocus.com/bid/363/info The 2.0.x kernels have a quirk in the TCP implementation that have to do with the accept call returning after only a syn has been recieved as opposed to the three way handshake having been completed. Sendmail, which is compiled on many unices,...

CVE-1999-0684

Denial of service in Sendmail 8.8.6 in HPUX...

PT-1999-1270 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail version 8.8.6 Description: The issue is related to a denial of service in Sendmail. Recommendations: For Sendmail version 8.8.6, update to a newer version that contains a fix for this issue...

CVE-1999-0565

A Sendmail alias allows input to be piped to a program...

CVE-1999-0205

Denial of service in Sendmail 8.6.11 and 8.6.12...

CVE-1999-0393

Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers...

PT-1999-1013 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail versions 8.6.11 through 8.6.12 Description: The issue is related to a denial of service in the affected software. Recommendations: For versions 8.6.11 and 8.6.12, update to a version that contains a fix for this issue...

PT-1999-1194 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail affected versions not specified Description: The issue allows input to be piped to a program through a Sendmail alias. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Sendmail 8.9.2 - Headers Prescan Denial of Service

Sendmail 8.9.2 - Headers Prescan Denial of Service / against.c - Another Sendmail and pine ;- DoS up to 8.9.2 c 1999 by Usage: ./against existinguseronvictimhost victimhost Example: ./against nobody lamers.net / include include include include include include include include include include inclu...