Description
Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option.
References
- CA-1994-12 third-party-advisory
- 19940315 anyone know details? mailing-list
- 19940315 Security problem in sendmail versions 8.x.x mailing-list
- 19940327 sendmail exploit script - resend mailing-list
- sendmail-debug-gain-root(7155) vdb-entry
- 19940315 so... mailing-list
- 19940314 sendmail -d problem (OLD yet still here) mailing-list