Nessus Plugin #11346

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Sendmail 8.7.*/8.8.* local overflow

Family:

SMTP problems

Category:

infos

Copyright:

This script is Copyright (C) 2003 Xue Yong Zhi

Summary:

Checks the version number

Version:

$Revision: 1.3 $

Cve_id:

CVE-1999-0130

Bugtraq_id:

716

Xrefs:

-

Description:

The remote sendmail server, according to its version number,
allows local user to start it in daemon mode and gain root
privileges.

Solution : Install sendmail newer than 8.8.3 or install a vendor
supplied patch.

Risk factor : High (Local) / None (remote with no account)