CVE-1999-0129
Current Description
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
Basic Data
Published | December 03, 1996 |
Last Modified | October 30, 2018 |
Assigner | cve@mitre.org |
Data Type | CVE |
Data Format | MITRE |
Data Version | 4.0 |
Problem Type | NVD-CWE-Other |
CVE Data Version | 4.0 |
Base Metric V2
CVSS 2 - Version | 2.0 |
CVSS 2 - Vector String | AV:L/AC:L/Au:N/C:P/I:P/A:P |
CVSS 2 - Access Vector | LOCAL |
CVSS 2 - Access Complexity | LOW |
CVSS 2 - Authentication | NONE |
CVSS 2 - Confidentiality Impact | PARTIAL |
CVSS 2 - Availability Impact | PARTIAL |
CVSS 2 - Base Score | 4.6 |
Severity | MEDIUM |
Exploitability Score | 3.9 |
Impact Score | 6.4 |
Obtain All Privilege | false |
Obtain User Privilege | true |
Obtain Other Privilege | false |
Base Metric V3
No data provided.
Configurations
-
OR - Configuration 1
Cpe Version | Part | Vendor | Product | Version | Update | Edition | Language | SW Edition | Target SW | Target HW | Other | Version Start Including | Version End Including | Version Start Excluding | Version End Excluding |
2.3 | Application | Eric Allman | Sendmail | 8.8 | * | * | * | * | * | * | * | |