CVE-1999-0095
Sendmail - Authenticated Remote Code Execution via Debug Command
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-1999-0095. PoCs published by anonymous, HORKimhab.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in an SMTP server by injecting shell commands into the recipient field. The payload uses `sed` to strip mail headers and execute arbitrary commands, demonstrating remote code execution (RCE).
Description
The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
Exploits (2)
This exploit leverages a command injection vulnerability in an SMTP server by injecting shell commands into the recipient field. The payload uses `sed` to strip mail headers and execute arbitrary commands, demonstrating remote code execution (RCE).
The repository contains a placeholder markdown file for CVE-1999-0095, describing a debug command vulnerability in Sendmail that allows remote command execution as root. However, no functional exploit code or technical details are provided.