ID CVE-1999-0145
Summary Sendmail WIZ command enabled, allowing root access.
References
Vulnerable Configurations
  • cpe:2.3:a:eric_allman:sendmail:*:*:*:*:*:*:*:*
    cpe:2.3:a:eric_allman:sendmail:*:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 11-06-2019 - 20:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bugtraq 19950206 sendmail wizard thing...
cert
  • CA-1990-11
  • CA-1993-14
farmervenema Improving the Security of Your Site by Breaking Into it
fulldisc 20190611 The Return of the WIZard: RCE in Exim (CVE-2019-10149)
mlist
  • [oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit
  • [oss-security] 20190606 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit
Last major update 11-06-2019 - 20:29
Published 30-09-1993 - 04:00
Last modified 11-06-2019 - 20:29
Back to Top