CVEvulnerability
CVE-1999-1580
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 1995-08-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option.
Affected configurations
• sendmail sendmail 5.59
• sendmail sendmail 5.61
• sendmail sendmail 5.65
• sun sunos 4.1.1
• sun sunos 4.1.2
• sun sunos 4.1.3
• sun sunos 4.1.3c
• sun sunos 4.1.3u1
• sun sunos 4.1.4
• sun sunos 4.1.4jl
References
- http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-21.html Exploit
- http://www.auscert.org.au/render.html?it=1853&cid=1978 Vendor Advisory
- http://www.cert.org/advisories/CA-95.11.sun.sendmail-oR.vul Patch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/3278 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/7829 www.securityfocus.com
- http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-21.html Exploit
- http://www.auscert.org.au/render.html?it=1853&cid=1978 Vendor Advisory
- http://www.cert.org/advisories/CA-95.11.sun.sendmail-oR.vul Patch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/3278 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/7829 www.securityfocus.com