(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote Sendmail server discloses too much information to local users when
the command 'sendmail -q -d0-nnn.xxx' is executed. A local attacker may use this flaw to
gather data about your local sendmail configuration.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2001-0715
Sendmail DEBUG Arbitrary Command Execution
PVS ID: 2028 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:10247
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote Sendmail server accepts the DEBUG mode. An attacker may
use it to gain a shell on this host.
Solution: Upgrade or patch according to vendor recommendations.
CVE-1999-0095
Sendmail < 8.8.3 Local Overflow
PVS ID: 2029 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:11346
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote Sendmail server may allow a local user to gain root
privileges.
Solution: Upgrade to Sendmail 8.8.3 or higher.
CVE-1999-0130
Sendmail < 8.12.1 Custom Configuration File Privilege Escalation
PVS ID: 2030 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:11086
Description: Synopsis :\n\nThe remote host may allow a local attacker to escalate privileges. \n\nThe
remote sendmail server may be vulnerable to a mail system compromise if a rogue local
user supplies a custom configuration file.
Solution: Upgrade to version 8.12.1 or higher.
CVE-2001-0713
Sendmail < 8.12.9 NOCHAR Value Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2031 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:11499
Family Internet Services 518