CVE-1999-1580: Sendmail

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option.

Affected products

• Sendmail Sendmail: version 5.59 only; version 5.61 only; version 5.65 only
• Sun Sunos: version 4.1.1 only; version 4.1.2 only; version 4.1.3 only; version 4.1.3c only; version 4.1.3u1 only; version 4.1.4 only; …

Published 1995-08-23. Last modified 2026-06-16.