CVE-1999-0129

Current Description

Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.

Referenced by CVEs:

CVSS 2 - Version	2.0
CVSS 2 - Vector String	AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS 2 - Access Vector	LOCAL
CVSS 2 - Access Complexity	LOW
CVSS 2 - Authentication	NONE
CVSS 2 - Confidentiality Impact	PARTIAL
CVSS 2 - Availability Impact	PARTIAL
CVSS 2 - Base Score	4.6
Severity	MEDIUM
Exploitability Score	3.9
Impact Score	6.4
Obtain All Privilege	false
Obtain User Privilege	true
Obtain Other Privilege	false

No data provided.

OR - Configuration 1

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	Application	Eric Allman	Sendmail	8.8	*	*	*	*	*	*	*
2.3	Application	Eric Allman	Sendmail	8.8.1	*	*	*	*	*	*	*
2.3	Application	Eric Allman	Sendmail	8.8.2	*	*	*	*	*	*	*
2.3	Application	Eric Allman	Sendmail	8.8.3	*	*	*	*	*	*	*

OR - Configuration 2

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	OS	Bsdi	Bsd Os	2.1	*	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	2.1.5	*	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	2.1.6	*	*	*	*	*	*	*
2.3	OS	Freebsd	Freebsd	2.1.6.1	*	*	*	*	*	*	*
2.3	OS	Hp	Hp-ux	10.00	*	*	*	*	*	*	*
2.3	OS	Hp	Hp-ux	10.01	*	*	*	*	*	*	*
2.3	OS	Hp	Hp-ux	10.10	*	*	*	*	*	*	*
2.3	OS	Hp	Hp-ux	10.16	*	*	*	*	*	*	*
2.3	OS	Hp	Hp-ux	10.20	*	*	*	*	*	*	*
2.3	OS	Ibm	Aix	3.2	*	*	*	*	*	*	*
2.3	OS	Ibm	Aix	4.1	*	*	*	*	*	*	*
2.3	OS	Ibm	Aix	4.2	*	*	*	*	*	*	*
2.3	OS	Sco	Internet Faststart	1.0	*	*	*	*	*	*	*
2.3	OS	Sco	Internet Faststart	1.1	*	*	*	*	*	*	*
2.3	OS	Sco	Openserver	5.0	*	*	*	*	*	*	*
2.3	OS	Sco	Openserver	5.0.2	*	*	*	*	*	*	*
2.3	OS	Sun	Solaris	2.4	*	x86	*	*	*	*	*
2.3	OS	Sun	Solaris	2.5	*	x86	*	*	*	*	*
2.3	OS	Sun	Solaris	2.5.1	*	x86	*	*	*	*	*
2.3	OS	Sun	Sunos	4.1.3u1	*	*	*	*	*	*	*
2.3	OS	Sun	Sunos	4.1.4	*	*	*	*	*	*	*
2.3	OS	Sun	Sunos	5.3	*	*	*	*	*	*	*
2.3	OS	Sun	Sunos	5.4	*	*	*	*	*	*	*
2.3	OS	Sun	Sunos	5.5	*	*	*	*	*	*	*
2.3	OS	Sun	Sunos	5.5.1	*	*	*	*	*	*	*

This CVE contains no reference information.