Description
Local users can start Sendmail in daemon mode and gain root privileges.
Affected products
- bsdi / bsd_os2.1 – 2.1
- caldera / network_desktop1.0 – 1.0
- eric_allman / sendmail8.7 – 8.7
- eric_allman / sendmail8.8 – 8.8
- eric_allman / sendmail8.8.1 – 8.8.1
- eric_allman / sendmail8.8.2 – 8.8.2
- FreeBSD / FreeBSD2.1.6 – 2.1.6
- FreeBSD / FreeBSD2.1.5 – 2.1.5
- HP / hp-ux10.00 – 10.00
- HP / hp-ux10.01 – 10.01
- HP / hp-ux10.10 – 10.10
- HP / hp-ux10.20 – 10.20
- ibm / aix4.2 – 4.2
- RedHat / linux4.0 – 4.0
Exploits & proofs of concept
- exploit-dbBSD 2 / CND 1 / Sendmail 8.x / FreeBSD 2.1.x / HP-UX 10.x / AIX 4 / RedHat 4 - Sendmail Daemonby Leshka Zakharoff
References
Updated 43m ago · 8 sources