CVE-1999-0129

Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file...

CVE-1999-0478

Denial of service in HP-UX sendmail 8.8.6 related to accepting connections...

CVE-1999-0206

MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access...

CVE-1999-0204

Sendmail 8.6.9 allows remote attackers to execute root commands, using ident...

CVE-1999-0096

Sendmail decode alias can be used to overwrite sensitive files...

CVE-1999-0129

CVE-1999-0129 affects Sendmail and enables local privilege escalation: authenticated or local users can write to a file and gain group permissions via a ".forward" or ":include:" file. Confirmed in multiple connected documents: OpenVAS notes Sendmail 8.8.x up to 8.8.3 vulnerable to group write/fi...

CVE-1999-0206

CVE-1999-0206 describes a MIME buffer overflow in Sendmail versions 8.8.0 and 8.8.1 that can give root access. Connected documents corroborate: Red Hat and Nessus sources note a MIME processing overflow affecting those versions with root access consequences, and a remediation suggested is to upgr...

CVE-1999-0047: Undefined Security Weakness

MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4...

CVE-1999-0131: Undefined Security Weakness

Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users...

CVE-1999-0095: Undefined Security Weakness

The debug command in Sendmail is enabled, allowing attackers to execute commands as root...

CVE-1999-0130: Undefined Security Weakness

Local users can start Sendmail in daemon mode and gain root privileges...

CVE-1999-0057: Undefined Security Weakness

Vacation program allows command execution by remote users through a sendmail command...

CVE-1999-0206: Undefined Security Weakness

MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access...

CVE-1999-0096: Undefined Security Weakness

Sendmail decode alias can be used to overwrite sensitive files...

CVE-1999-0204: Undefined Security Weakness

Sendmail 8.6.9 allows remote attackers to execute root commands, using ident...

CVE-1999-0129: Undefined Security Weakness

Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file...

CVE-1999-0478: Undefined Security Weakness

Denial of service in HP-UX sendmail 8.8.6 related to accepting connections...

rootcron.txt

!/bin/sh clear echo '------------------------------------------------------------------' echo 'Marchew Hyperreal Industries ' echo 'Stumilowy Las Team ' echo '---------------------------- presents ----------------------------' echo echo ' -= vixie-cron root sploit by Michal Zalewski =-' echo echo...

Sendmail decode Alias Arbitrary File Overwrite

The remote SMTP server seems to pipe mail sent to the 'decode' alias to a program. There have been in the past a lot of security problems regarding this, as it would allow an attacker to overwrite arbitrary files on the remote server. We suggest you deactivate this alias. C Tenable Network...

Sendmail RCPT TO Command Arbitrary File Overwrite

The remote SMTP server did not complain when issued the command : MAIL FROM: root@thishost RCPT TO: /tmp/nessustest This probably means that it is possible to send mail directly to files, which is a serious threat, since this allows anyone to overwrite any file on the remote server. This security...