CVE-1999-0163
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
CVE-1999-0163 is a high vulnerability (CVSS 7.2) in Eric Allman Sendmail, published January 1, 1997. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. No source names a fixed version.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.44%EPSS, 38th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sendmailAzure Linux:2 | through 8.15.2-46 | None known |
What each source reports
NVD Score used
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- Record
CVE-1999-0163- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- Record
CVE-1999-0163- Updated
- 2026-11-02
EUVDEUVD-1999-0163No score
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- Record
EUVD-1999-0163- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v7v4-vj4g-88whNo score
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- Record
GHSA-v7v4-vj4g-88wh- Updated
- 2026-11-02
OSVAZL-7358No score
CVE-1999-0163 affecting package sendmail 8.15.2-46
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- Record
AZL-7358- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.