EIP-2026-102830

This exploit leverages a combination of vulnerabilities in sendmail to hijack the file descriptor for the privileged port 25. It involves a half-open TCP scan to make sendmail sleep, starting sendmail with a modified argv[0], and sending a HUP signal to execute arbitrary code with the inherited socket descriptor.