Sendmail vulnerabilities
17 known CVE vulnerabilities in Sendmail, translated and rated.
- CVE-1999-1109Medium
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.
- CVE-1999-0204High
Sendmail version 8.6.9 allows remote attackers to execute root commands using ident.
- CVE-1999-0095High
The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
- CVE-2000-0319Medium
mail.local in Sendmail 8.10.x does not properly identify the . string which indicates the end of message text. This allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in . .
- CVE-1999-0976Low
Sendmail allows local users to reinitialize the aliases database via the newaliases command, which can lead to denial of service by interrupting Sendmail.
- CVE-1999-0684Medium
CVE-1999-0684 vulnerability affects Sendmail version 8.8.6 on HPUX, allowing for a denial of service attack.
- CVE-1999-0565High
A vulnerability in Sendmail allows input to be piped to a program via an alias.
- CVE-1999-0098High
Buffer overflow in the SMTP HELO command in Sendmail allows a remote attacker to hide activities.
- CVE-1999-0047High
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
- CVE-1999-0163High
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- CVE-1999-0096Medium
A vulnerability in Sendmail allows the use of alias decoding to overwrite sensitive files.
- CVE-1999-0129Medium
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
- CVE-1999-0130High
Local users can start Sendmail in daemon mode, allowing them to gain root privileges.
- CVE-1999-0131High
In Sendmail 8.7.5 and earlier, a buffer overflow and denial of service through the GECOS field allows local users to gain root access.
- CVE-1999-1309High
Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option.
- CVE-1999-0203High
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper 'mail from' address and an invalid 'rcpt to' address that would cause the mail to bounce to a program.
- CVE-1999-0145High
The WIZ command in Sendmail is enabled, allowing root access to the system.