SE
Product
Sendmail
by Eric Allman · last CVE Apr 23, 2000
14
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Sendmail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2000-0319
–
2%
Apr 23
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or…
Affected: 5.58; 5.59; 8.6.x; 8.7.1; 8.7.2; 8.7.3; +13 more
CVE-1999-0976
–
0%
Dec 7
Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail
Affected: 8.9.3
CVE-1999-0393
–
2%
Jan 1
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers
Affected: 8.8; 8.9.2
CVE-1999-0205
–
1%
Jan 1
Denial of service in Sendmail 8.6.11 and 8.6.12
Affected: 8.6.11; 8.6.12
CVE-1999-0047
–
3%
Jan 28
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4
Affected: 8.8.3; 8.8.4
CVE-1999-0163
–
0%
Jan 1
In older versions of Sendmail, an attacker could use a pipe character to execute root commands
Affected: All versions, or not specified
CVE-1999-0204
–
9%
Jan 1
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident
Affected: 8.6.9
CVE-1999-0129
–
1%
Dec 3
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file
Affected: 8.8; 8.8.1; 8.8.2; 8.8.3
CVE-1999-0130
–
1%
Nov 16
Local users can start Sendmail in daemon mode and gain root privileges
Affected: 8.7; 8.8; 8.8.1; 8.8.2
CVE-1999-0206
–
2%
Oct 1
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access
Affected: 8.8; 8.8.1
CVE-1999-0131
–
1%
Sep 11
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users
Affected: 8.6; 8.7.1; 8.7.2; 8.7.3; 8.7.4; 8.7.5
CVE-1999-0203
–
2%
Aug 17
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a…
Affected: 8.6.10
CVE-1999-0145
–
1%
Sep 30
Sendmail WIZ command enabled, allowing root access
Affected: All versions, or not specified
CVE-1999-0095
–
16%
Oct 1
The debug command in Sendmail is enabled, allowing attackers to execute commands as root
Affected: 5.58
Showing 14