İçeriğe atla
Noroxi

eric allman kayıtları

eric allman üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

      Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

      CWE

      Saldırı profili

      Tüm kayıtlar

      15 kayıt
      • CVE-1999-0095
        45Planlayın

        The debug command in Sendmail is enabled, allowing attackers to execute commands as root.

        KritikCVSS 10,0Kavram kanıtıEPSS %16

        eric allman · sendmail1 Eki 1988

      • CVE-1999-0204
        43Planlayın

        Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.

        KritikCVSS 10,0Kavram kanıtıEPSS %8

        eric allman · sendmail1 Oca 1997

      • CVE-1999-0047
        41Planlayın

        MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.

        KritikCVSS 10,0İstismar yokEPSS %3

        eric allman · sendmail28 Oca 1997

      • CVE-1999-0203
        41Planlayın

        In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that

        KritikCVSS 10,0İstismar yokEPSS %2

        eric allman · sendmail17 Ağu 1995

      • CVE-1999-0206
        41Planlayın

        MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.

        KritikCVSS 10,0İstismar yokEPSS %1

        eric allman · sendmail1 Eki 1996

      • CVE-1999-0057
        32İzleyin

        Vacation program allows command execution by remote users through a sendmail command.

        YüksekCVSS 7,5İstismar yokEPSS %8

        eric allman · vacation16 Kas 1998

      • CVE-1999-0130
        28İzleyin

        Local users can start Sendmail in daemon mode and gain root privileges.

        YüksekCVSS 7,2Kavram kanıtıEPSS %1

        caldera · network desktop16 Kas 1996

      • CVE-1999-0145
        28İzleyin

        Sendmail WIZ command enabled, allowing root access.

        YüksekCVSS 7,2İstismar yokEPSS %0

        eric allman · sendmail30 Eyl 1993

      • CVE-1999-0131
        28İzleyin

        Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.

        YüksekCVSS 7,2İstismar yokEPSS %0

        eric allman · sendmail11 Eyl 1996

      • CVE-1999-0163
        28İzleyin

        In older versions of Sendmail, an attacker could use a pipe character to execute root commands.

        YüksekCVSS 7,2İstismar yokEPSS %0

        eric allman · sendmail1 Oca 1997

      • CVE-1999-0393
        21İzleyin

        Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.

        OrtaCVSS 5,0Kavram kanıtıEPSS %2

        eric allman · sendmail1 Oca 1999

      • CVE-2000-0319
        21İzleyin

        mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote atta

        OrtaCVSS 5,0İstismar yokEPSS %1

        eric allman · sendmail23 Nis 2000

      • CVE-1999-0205
        20İzleyin

        Denial of service in Sendmail 8.6.11 and 8.6.12.

        OrtaCVSS 5,0İstismar yokEPSS %1

        eric allman · sendmail1 Oca 1999

      • CVE-1999-0129
        18İzleyin

        Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.

        OrtaCVSS 4,6İstismar yokEPSS %0

        eric allman · sendmail3 Ara 1996

      • CVE-1999-0976
        8İzleyin

        Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting

        DüşükCVSS 2,1İstismar yokEPSS %0

        eric allman · sendmail7 Ara 1999