CVE-1999-0095

Sendmail - Authenticated Remote Code Execution via Debug Command

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-1999-0095. PoCs published by anonymous, HORKimhab.

AI-analyzed exploit summary This exploit leverages a command injection vulnerability in an SMTP server by injecting shell commands into the recipient field. The payload uses `sed` to strip mail headers and execute arbitrary commands, demonstrating remote code execution (RCE).

Description

The debug command in Sendmail is enabled, allowing attackers to execute commands as root.

Exploits (2)

exploitdb WORKING POC VERIFIED
by anonymous · textremotelinux
https://www.exploit-db.com/exploits/19028

This exploit leverages a command injection vulnerability in an SMTP server by injecting shell commands into the recipient field. The payload uses `sed` to strip mail headers and execute arbitrary commands, demonstrating remote code execution (RCE).

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: SMTP server (unspecified version)
No auth needed
Prerequisites: Access to the SMTP server · SMTP server vulnerable to command injection
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →
github STUB
by HORKimhab · shellpoc
https://github.com/HORKimhab/poc-cve-collection/tree/main/1999/0xxx/CVE-1999-0095.md

The repository contains a placeholder markdown file for CVE-1999-0095, describing a debug command vulnerability in Sendmail that allows remote command execution as root. However, no functional exploit code or technical details are provided.

Classification
Stub 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: Sendmail (versions with debug command enabled)
No auth needed
Prerequisites: Sendmail with debug command enabled
mistral-large-3 · analyzed Jul 14, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/195
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2019/06/05/4
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2019/06/06/1
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2019/Jun/16

Scores

EPSS 0.1645
EPSS Percentile 96.7%

Details

Status published
Products (1)
eric_allman/sendmail 5.58
Published Oct 01, 1988
Tracked Since Feb 18, 2026