CVE-1999-0131

Summary

CVE-1999-0131 is a significant vulnerability affecting Sendmail versions 8.7.5 and earlier. This issue allows local users to exploit a buffer overflow and denial of service vulnerability in the GECOS field, granting them root access to the system. The GECOS field, which stands for General Electric Comprehensive Operating System, is used to store the user's full name. By manipulating this field, an attacker can trigger the buffer overflow, potentially crashing the Sendmail service and gaining unauthorized root access. This vulnerability poses a serious threat to systems running the affected Sendmail versions and requires immediate patching to prevent potential unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.