CVE-1999-0131: Buffer Overflow
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
sendmailfrom your environment.Uninstall or stop Sendmail on systems where the mail daemon is not required to eliminate the vulnerability (affects Sendmail 8.7.5 and earlier).
- Compensating control
Restrict or block local untrusted user accounts and local login access to hosts running Sendmail (affected: 8.7.5 and earlier) until a vendor-supplied fix is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0131?
CVE-1999-0131 is rated as a high severity vulnerability due to the potential for root access by local users.
How do I fix CVE-1999-0131?
To fix CVE-1999-0131, you should upgrade to a version of Sendmail later than 8.7.5.
What software is affected by CVE-1999-0131?
CVE-1999-0131 affects Sendmail versions 8.6 through 8.7.5 and various UNIX operating systems.
What kind of attack is related to CVE-1999-0131?
CVE-1999-0131 involves a buffer overflow attack that can lead to denial of service and unauthorized root access.
Can CVE-1999-0131 be exploited remotely?
CVE-1999-0131 is primarily an issue for local users since it requires local access to exploit.