Eric Allman 15 CVEs across 2 Eric Allman products. Browse Eric Allman vulnerabilities, severities, and proof-of-concept exploits.
Eric Allman products with known CVEs Eric Allman CVEs — newest first CVE Severity Score Published Summary CVE-2000-03192000-04-23 mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a den… CVE-1999-09761999-12-07 Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail. CVE-1999-03931999-01-01 Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers. CVE-1999-02051999-01-01 Denial of service in Sendmail 8.6.11 and 8.6.12. CVE-1999-00571998-11-16 Vacation program allows command execution by remote users through a sendmail command. CVE-1999-00471997-01-28 MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4. CVE-1999-02041997-01-01 Sendmail 8.6.9 allows remote attackers to execute root commands, using ident. CVE-1999-01631997-01-01 In older versions of Sendmail, an attacker could use a pipe character to execute root commands. CVE-1999-01291996-12-03 Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. CVE-1999-01301996-11-16 Local users can start Sendmail in daemon mode and gain root privileges. CVE-1999-02061996-10-01 MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access. CVE-1999-01311996-09-11 Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users. CVE-1999-02031995-08-17 In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the ma… CVE-1999-01451993-09-30 Sendmail WIZ command enabled, allowing root access. CVE-1999-00951988-10-01 The debug command in Sendmail is enabled, allowing attackers to execute commands as root.