Skip to content
Eric Allman vulnerabilities
Newest
-
eric allman sendmail
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end...
CVE-2000-0319
5.0 Medium
-
eric allman sendmail
Sendmail allows local users to reinitialize the aliases database via the newaliases command, then...
CVE-1999-0976
2.1 Low
-
eric allman sendmail
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages...
CVE-1999-0393
Public exploit
5.0 Medium
-
eric allman sendmail
Denial of service in Sendmail 8.6.11 and 8.6.12.
CVE-1999-0205
5.0 Medium
-
eric allman vacation, freebsd, hp hp-ux +4 more +6 more
Vacation program allows command execution by remote users through a sendmail command.
CVE-1999-0057
7.5 High
-
eric allman sendmail, bsdi bsd os, caldera openlinux +2 more
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
CVE-1999-0047
10.0 High
-
eric allman sendmail
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
CVE-1999-0204
Public exploit
10.0 High
-
eric allman sendmail
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
CVE-1999-0163
7.2 High
-
eric allman sendmail, bsdi bsd os, freebsd +6 more +8 more
Sendmail allows local users to write to a file and gain group permissions via a .forward or ...
CVE-1999-0129
4.6 Medium
-
eric allman sendmail, bsdi bsd os, caldera network desktop +4 more +6 more
Local users can start Sendmail in daemon mode and gain root privileges.
CVE-1999-0130
Public exploit
7.2 High
-
eric allman sendmail
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
CVE-1999-0206
10.0 High
-
eric allman sendmail, bsdi bsd os, digital osf 1 +6 more +8 more
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives...
CVE-1999-0131
7.2 High
-
eric allman sendmail
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from"...
CVE-1999-0203
10.0 High
-
eric allman sendmail
Sendmail WIZ command enabled, allowing root access.
CVE-1999-0145
7.2 High
-
eric allman sendmail
The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
CVE-1999-0095
Public exploit
EPSS 16.3%
10.0 High