CVE-1999-1580

Опубликовано: 23 авг. 1995

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option.

Ссылки

http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-21.html
Exploit
http://www.auscert.org.au/render.html?it=1853&cid=1978
Vendor Advisory
http://www.cert.org/advisories/CA-95.11.sun.sendmail-oR.vul
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/3278
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/7829
http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-21.html
Exploit
http://www.auscert.org.au/render.html?it=1853&cid=1978
Vendor Advisory
http://www.cert.org/advisories/CA-95.11.sun.sendmail-oR.vul
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/3278
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/7829

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sendmail:sendmail:5.59:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:5.61:*:*:*:*:*:*:*

cpe:2.3:a:sendmail:sendmail:5.65:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:4.1.3c:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:4.1.4jl:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00778

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-1999-1580

debian

почти 30 лет назад

SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding ho ...

GHSA-qqmr-fh23-w8vj

github

больше 3 лет назад