CVE-1999-0163
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
Exploit likelihood
What each source reports
NVD Score used
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- Record
CVE-1999-0163- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- Record
CVE-1999-0163- Updated
- 2026-11-02
EUVDEUVD-1999-0163 No score
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- Record
EUVD-1999-0163- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v7v4-vj4g-88wh No score
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- Record
GHSA-v7v4-vj4g-88wh- Updated
- 2026-11-02
OSVAZL-7358 No score
CVE-1999-0163 affecting package sendmail 8.15.2-46
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- Record
AZL-7358- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sendmailAzure Linux:2 |
through 8.15.2-46 | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-0163 is a high vulnerability (CVSS 7.2) in Eric Allman Sendmail, published January 1, 1997. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. No source names a fixed version.