Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102830. PoCs published by Michal Zalewski.
AI-analyzed exploit summary This exploit leverages a combination of vulnerabilities in sendmail to hijack the file descriptor for the privileged port 25. It involves a half-open TCP scan to make sendmail sleep, starting sendmail with a modified argv[0], and sending a HUP signal to execute arbitrary code with the inherited socket descriptor.
Description
Eric Allman Sendmail 8.8.x - Socket Hijack
Exploits (1)
This exploit leverages a combination of vulnerabilities in sendmail to hijack the file descriptor for the privileged port 25. It involves a half-open TCP scan to make sendmail sleep, starting sendmail with a modified argv[0], and sending a HUP signal to execute arbitrary code with the inherited socket descriptor.