PatchTheCVEeric allman vulnerabilities
Recent CVEs affecting eric allman products. 5 tracked.
eric allman has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2000-04-23. Highest priority: CVE-1999-0057 (score 50/100).
- CVE-2000-0319 MEDIUM 5.0 DOWNGRADE mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message te
- CVE-1999-0976 LOW 2.1 DOWNGRADE Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a deni
- CVE-1999-0393 MEDIUM 5.0 DOWNGRADE Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large nu
- CVE-1999-0205 MEDIUM 5.0 DOWNGRADE Denial of service in Sendmail 8.6.11 and 8.6.12.
- CVE-1999-0057 HIGH 7.5 MITIGATE MITIGATE Vacation program allows command execution by remote users through a sendmail command.
FAQ
How do I fix eric allman vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eric allman being exploited right now?
None of the tracked eric allman CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eric allman CVE should I patch first?
CVE-1999-0057 currently ranks highest (50/100): Vacation program allows command execution by remote users through a sendmail command..