CVE-1999-1580

Summary

CVE-1999-1580 is a vulnerability affecting SunOS sendmail versions 5.59 through 5.65. This issue allows local users to exploit a misconfiguration in the handling of forwarding hosts. By manipulating the Internal Field Separator (IFS) variable and feeding crafted values to the -oR option, attackers can execute arbitrary commands, effectively gaining root privileges. This vulnerability poses a significant risk to systems running the affected versions of sendmail and requires immediate patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.