PT-1999-1578 · Sendmail · Sendmail

Published 1999-12-22 · Updated 2016-10-18 · CVE-1999-1109

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sendmail versions prior to 8.10.0

Description The issue allows remote attackers to cause a denial of service by sending a series of ETRN commands and then disconnecting from the server. After the connection has been terminated, Sendmail continues to process the commands, leading to the denial of service.

Recommendations For versions prior to 8.10.0, update to version 8.10.0 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-1999-1109

Affected Products

Sendmail

References · 6

• 🔥 https://exploit-db.com/exploits/19701 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1109 · Security Note
• http://iss.net/security_center/static/7760.php · Note
• http://marc.info/?l=bugtraq&m=94632241202626&w=2 · Note
• http://marc.info/?l=bugtraq&m=94780566911948&w=2 · Note
• http://securityfocus.com/bid/904 · Note