What’s Vulnerable › Vulnerabilities

CVE-1999-0131

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 1996-09-11 · updated 2026-06-16

Description

Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.

Affected products

• Bsdi Bsd Os: 2.1
• Digital Osf 1: 1.3.2
• Eric Allman Sendmail: 8.6, 8.7.1, 8.7.2, 8.7.3, 8.7.4, 8.7.5
• FreeBSD: 2.1.5
• Hewlett Packard Enterprise (HPE) HP-UX: 10.01, 10.10, 10.20
• IBM AIX: 3.2, 4.1, 4.2
• RedHat Linux: 3.0.3
• Sco Internet Faststart: 1.0
• Sco Openserver: 5.0, 5.0.2

References

• http://www.securityfocus.com/bid/717
• http://www.securityfocus.com/bid/717

Get alerted when CVE-1999-0131 or the next vulnerability affects your stack