CVE-1999-1580

Summary

CVE-1999-1580 is a vulnerability affecting SunOS sendmail versions 5.59 to 5.65. It allows local users to exploit the program by manipulating the Internal Field Separator (IFS) variable and passing crafted values to the -oR option via the forwarding host argument. This vulnerability can result in unintended command execution, effectively granting root privileges to the attacker. The use of the popen function in sendmail's processing of forwarding host arguments is the root cause of this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.