CVE-1999-0095

Description

The debug command in Sendmail is enabled, allowing attackers to execute commands as root.

Affected products

• eric_allman / sendmail5.58 – 5.58

Exploits & proofs of concept

• exploit-dbBerkeley Sendmail 5.58 - Debugby anonymous

References

• MISChttp://www.osvdb.org/195
• MISChttp://www.securityfocus.com/bid/1
• MAILING_LISThttp://www.openwall.com/lists/oss-security/2019/06/05/4
• MAILING_LISThttp://www.openwall.com/lists/oss-security/2019/06/06/1
• MAILING_LISThttp://seclists.org/fulldisclosure/2019/Jun/16