SunOS sendmail 5.59 up to and including 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
sendmail sendmail 5.59 |
||
sendmail sendmail 5.65 |
||
sendmail sendmail 5.61 |
||
sun sunos 4.1.3c |
||
sun sunos 4.1.4 |
||
sun sunos 4.1.1 |
||
sun sunos 4.1.2 |
||
sun sunos 4.1.3 |
||
sun sunos 4.1.3u1 |
||
sun sunos 4.1.4jl |
Vulmon