| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
| url |
VCID-b82y-qxph-7qcb |
| vulnerability_id |
VCID-b82y-qxph-7qcb |
| summary |
SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-1999-1580
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b82y-qxph-7qcb |
|
| 8 |
| url |
VCID-bvuf-e7ah-8bcz |
| vulnerability_id |
VCID-bvuf-e7ah-8bcz |
| summary |
Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-0129. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-1999-1592
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bvuf-e7ah-8bcz |
|
| 9 |
|
| 10 |
|
| 11 |
| url |
VCID-d9p1-zyaw-rffn |
| vulnerability_id |
VCID-d9p1-zyaw-rffn |
| summary |
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2003-0308
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-d9p1-zyaw-rffn |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
| url |
VCID-tkbv-vghd-3ug1 |
| vulnerability_id |
VCID-tkbv-vghd-3ug1 |
| summary |
Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2002-0906
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tkbv-vghd-3ug1 |
|
| 23 |
| url |
VCID-xyu9-k5f8-2fe9 |
| vulnerability_id |
VCID-xyu9-k5f8-2fe9 |
| summary |
Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2004-0833
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xyu9-k5f8-2fe9 |
|