Description
Sendmail WIZ command enabled, allowing root access.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | sendmail | No fix yet | — |
References
- CA-1990-11 third-party-advisory
- 19950206 sendmail wizard thing... mailing-list
- CA-1993-14 third-party-advisory
- Improving the Security of Your Site by Breaking Into it technical-description
- [oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-list
- [oss-security] 20190606 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit mailing-list
- 20190611 The Return of the WIZard: RCE in Exim (CVE-2019-10149) mailing-list