CVE-1999-1109
MediumExploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the mail server's operation, potentially leading to service unavailability for users.
Recommendation
It is recommended to upgrade Sendmail to version 8.10.0 or later to mitigate this vulnerability.
Original NVD description (English source)
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.