CVE-1999-0129
published 1996-12-03CVE-1999-0129: Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
PriorityP48medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EPSS
0.56%
46.1th percentile
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
Affected
31 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bsdi | bsd_os | — | — |
| debian | sendmail | — | — |
| eric_allman | sendmail | — | — |
| eric_allman | sendmail | — | — |
| eric_allman | sendmail | — | — |
| eric_allman | sendmail | — | — |
| freebsd | freebsd | — | — |
| freebsd | freebsd | — | — |
| freebsd | freebsd | — | — |
| hp | hp-ux | — | — |
| hp | hp-ux | — | — |
| hp | hp-ux | — | — |
| hp | hp-ux | — | — |
| hp | hp-ux | — | — |
| ibm | aix | — | — |
| ibm | aix | — | — |
| ibm | aix | — | — |
| sco | internet_faststart | — | — |
| sco | internet_faststart | — | — |
| sco | openserver | — | — |
| sco | openserver | — | — |
| sendmail | sendmail | — | — |
| sun | solaris | — | — |
| sun | solaris | — | — |
| sun | solaris | — | — |
CVSS provenance
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_debian4.6LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5353-8fg9-4vq8: Sendmail allows local users to write to a file and gain group permissions via a
ghsa_unreviewed·2022-04-30
CVE-1999-0129 [MEDIUM] GHSA-5353-8fg9-4vq8: Sendmail allows local users to write to a file and gain group permissions via a
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
GHSA
GHSA-m569-vmh5-cc9h: Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4
ghsa_unreviewed·2022-04-30·CVSS 4.6
CVE-1999-1592 [MEDIUM] GHSA-m569-vmh5-cc9h: Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4
Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-0129.
Debian
CVE-1999-1592: sendmail - Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4....
vendor_debian·1999·CVSS 4.6
CVE-1999-1592 [MEDIUM] CVE-1999-1592: sendmail - Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4....
Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-0129.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
1996-12-03
Published