Eric Allman Sendmail — known CVE vulnerabilities

Every CVE whose affected-product data names Eric Allman Sendmail, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-1999-0047 — CVSS 10.0 (critical): MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
• CVE-1999-0095 — CVSS 10.0 (critical): The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
• CVE-1999-0203 — CVSS 10.0 (critical): In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address…
• CVE-1999-0204 — CVSS 10.0 (critical): Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
• CVE-1999-0206 — CVSS 10.0 (critical): MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
• CVE-1999-0145 — CVSS 7.2 (high): Sendmail WIZ command enabled, allowing root access.
• CVE-1999-0163 — CVSS 7.2 (high): In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
• CVE-1999-0130 — CVSS 7.2 (high): Local users can start Sendmail in daemon mode and gain root privileges.
• CVE-1999-0131 — CVSS 7.2 (high): Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
• CVE-1999-0205 — CVSS 5.0 (medium): Denial of service in Sendmail 8.6.11 and 8.6.12.
• CVE-2000-0319 — CVSS 5.0 (medium): mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote…
• CVE-1999-0393 — CVSS 5.0 (medium): Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
• CVE-1999-0129 — CVSS 4.6 (medium): Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
• CVE-1999-0976 — CVSS 2.1 (low): Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting…