high7.2Public exploit code
CVE-1999-0130
Local users can start Sendmail in daemon mode and gain root privileges.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BSD 2 / CND 1 / Sendmail 8.x / FreeBSD 2.1.x / HP-UX 10.x / AIX 4 / RedHat 4 - Sendmail Daemon1996-11-16 · local · multiple · Verified
Impact
Local users can start Sendmail in daemon mode and gain root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Caldera | Network Desktop | Version 1.0 |
| Eric Allman | Sendmail | Versions 8.7, 8.8, 8.8.1, 8.8.2 |
| Bsdi | Bsd Os | Version 2.1 |
| Freebsd | Freebsd | Versions 2.1.5, 2.1.6 |
| Hp | Hp-Ux | Versions 10.00, 10.01, 10.10, 10.20 |
| Ibm | Aix | Version 4.2 |
| Redhat | Linux | Version 4.0 |