CVE-1999-0163
HighExploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
Risk Assessment
The ability to execute commands with administrator privileges poses a serious security risk to the system.
Recommendation
It is recommended to update Sendmail to the latest version to mitigate this vulnerability.
Other vulnerabilities in Sendmail
See all- CVE-1999-1109Medium
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.
- CVE-1999-0204High
Sendmail version 8.6.9 allows remote attackers to execute root commands using ident.
- CVE-1999-0095High
The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
- CVE-2000-0319Medium
mail.local in Sendmail 8.10.x does not properly identify the . string which indicates the end of message text. This allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in . .
- CVE-1999-0976Low
Sendmail allows local users to reinitialize the aliases database via the newaliases command, which can lead to denial of service by interrupting Sendmail.
- CVE-1999-0684Medium
CVE-1999-0684 vulnerability affects Sendmail version 8.8.6 on HPUX, allowing for a denial of service attack.
- CVE-1999-0565High
A vulnerability in Sendmail allows input to be piped to a program via an alias.
- CVE-1999-0098High
Buffer overflow in the SMTP HELO command in Sendmail allows a remote attacker to hide activities.
- CVE-1999-0047High
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
- CVE-1999-0096Medium
A vulnerability in Sendmail allows the use of alias decoding to overwrite sensitive files.
Original NVD description (English source)
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.