SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option.
> AFFECTED_PRODUCTS
Sun - Sunos
Version: 4.1.1
Sun - Sunos
Version: 4.1.2
Sun - Sunos
Version: 4.1.3
Sun - Sunos
Version: 4.1.3c
Sun - Sunos
Version: 4.1.3u1
Sun - Sunos
Version: 4.1.4
Sun - Sunos
Version: 4.1.4jl
Sendmail - Sendmail
Version: 5.59
Sendmail - Sendmail
Version: 5.61
Sendmail - Sendmail
Version: 5.65
> HISTORIQUE DES MODIFICATIONS
Première apparition
23/08/1995 04:00
Source: NVD
📊
ENRICHISSEMENT
18/10/2025 12:45
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1
Dernière mise à jour: 11 months ago