PT-1996-1021 · Sendmail · Sendmail

Published 1996-09-11 · Updated 2008-09-09 · CVE-1999-0131

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sendmail versions 8.7.5 and earlier

Description The issue allows for buffer overflow and denial of service, potentially giving root access to local users through the GECOS field.

Recommendations For Sendmail versions 8.7.5 and earlier, update to a version later than 8.7.5 to resolve the issue.

Fix

Related Identifiers

CVE-1999-0131

Affected Products

Sendmail

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0131 · Security Note
• http://securityfocus.com/bid/717 · Note