Vendors / Eric Allman Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 5
Exploited now Eric Allman records in CISA KEV No Eric Allman vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 59
The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.16317 · Published 1999-09-29 · No fix listed
Priority MEDIUM 54
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08839 · Published 1999-09-29 · No fix listed
Priority MEDIUM 48
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03112 · Published 1999-09-29 · No fix listed
Priority MEDIUM 47
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01895 · Published 1999-09-29 · No fix listed
Priority MEDIUM 47
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02124 · Published 2000-04-25 · No fix listed
Priority LOW 34
Sendmail WIZ command enabled, allowing root access.
CVSS 2.0 HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00984 · Published 2000-10-13 · No fix listed
Priority LOW 34
Local users can start Sendmail in daemon mode and gain root privileges.
CVSS 2.0 HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01055 · Published 1999-09-29 · No fix listed
Priority LOW 32
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
CVSS 2.0 HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00437 · Published 2000-02-04 · No fix listed
Priority LOW 32
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
CVSS 2.0 HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00571 · Published 1999-09-29 · No fix listed
Priority LOW 27
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that i…
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01835 · Published 2000-10-13 · No fix listed
Priority LOW 27
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02427 · Published 2000-10-13 · No fix listed
Priority LOW 26
Denial of service in Sendmail 8.6.11 and 8.6.12.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01348 · Published 2000-02-04 · No fix listed
Priority LOW 22
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
CVSS 2.0 MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00563 · Published 1999-09-29 · No fix listed
Priority LOW 11
Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.
CVSS 2.0 LOW 2.1· Local · No auth · Interaction — · EPSS 0.00291 · Published 2000-06-02 · No fix listed
Open these records in search → All records by CVSS severity
5 5 4 1 0
THREATIST.IORead the docs