Unscored severity · published Aug 17, 1995
CVE-1999-0203
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a…
–
CVSS
2.1%
EPSS
No
On KEV
Description
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Sendmail · Eric Allman
8.6.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-0203
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-0203
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0203
More from Sendmail
–
CVE-2000-0319
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or…
–
CVE-1999-0976
Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail
–
CVE-1999-0393
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers
–
CVE-1999-0205
Denial of service in Sendmail 8.6.11 and 8.6.12
–
CVE-1999-0047
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4