CVE-1999-0684

Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.

Sendmail version 8.6.9 allows remote attackers to execute root commands using ident.

The debug command in Sendmail is enabled, allowing attackers to execute commands as root.

mail.local in Sendmail 8.10.x does not properly identify the . string which indicates the end of message text. This allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in . .

Sendmail allows local users to reinitialize the aliases database via the newaliases command, which can lead to denial of service by interrupting Sendmail.

A vulnerability in Sendmail allows input to be piped to a program via an alias.

Buffer overflow in the SMTP HELO command in Sendmail allows a remote attacker to hide activities.

MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.

In older versions of Sendmail, an attacker could use a pipe character to execute root commands.

A vulnerability in Sendmail allows the use of alias decoding to overwrite sensitive files.