CVEvulnerability

CVE-1999-0203

10.0 HIGH Published 1995-08-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1995-08-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program.

Affected configurations

• eric allman sendmail 8.6.10

References