CVE-1999-0203: Eric Allman Sendmail

High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days.

In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program.

Affected products

• Eric Allman Sendmail: version 8.6.10 only

Published 1995-08-17. Last modified 2026-06-16.