Sploitus

25 exploited vulnerabilities in Sendmail

Vulnerabilities with publicly known exploits

Vendors
Mailreader.Com, Sendmail, Openbsd, Washington University, Hewlett Packard, Red Hat
With known exploits
25
Affected Mailreader.com versions
= 2.3.30, 2.3.31
Affected Sendmail Advanced Message Server versions
= 1.2, 1.3
Affected Sendmail versions
= 2.6, 2.6.1, 2.6.2, 3.0, 3.0.1, 3.0.2, 3.0.3, 8.8.8, 8.9.0, 8.9.1, 8.9.2, 8.9.3, 8.10, 8.10.1, 8.10.2, 8.11.0, 8.11.1, 8.11.2, 8.11.3, 8.11.4, 8.11.5, 8.11.6, 8.12, 8.12.0, 8.12.1, 8.12.2, 8.12.3, 8.12.4, 8.12.5, 8.12.6, 8.12.7, 8.12.8, 8.12.9, 8.13.0, 8.13.1, 8.13.2, 8.13.3, 8.13.4, 8.13.5, 5.59, 5.61, 5.65, 8.18.0.2, 8.13.1.2, 4.1, 4.55, 5, 8.6.7, 8.7.6, 8.7.7, 8.7.8, 8.7.9, 8.7.10, 8.10.0, 8.11.7
Affected Sendmail Sendmail Pro versions
= 8.9.2, 8.9.3
Affected Sendmail Sendmail Switch versions
= 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.2, 2.2.1, 2.2.2
Affected Eric Allman Sendmail versions
= 8.6.9, 5.58, 8.7, 8.8, 8.8.1, 8.8.2, 8.9.2
Affected f5 Nginx versions
< 1.21.0
Affected Paul Vixie Vixie Cron versions
= 3.0_pl1

Vulnerabilities with exploits

Highest CVSS first — 20 of these already have exploit code on Sploitus

CVE-2002-1582
CVSS 10.0 HIGH 2004-07-06FIX AVAILABLE
CVE-2003-0694 3 exploits
CVSS 10.0 HIGH 2003-09-18FIX AVAILABLE
CVE-2003-0161 2 exploits
CVSS 10.0 HIGH 2003-04-01FIX AVAILABLE
CVE-2002-1337 3 exploits
CVSS 10.0 HIGH 2003-03-07FIX AVAILABLE
CVE-1999-0661 1 exploit
CVSS 10.0 HIGH 1999-01-01FIX AVAILABLE
CVE-1999-0204 1 exploit
CVSS 10.0 HIGH 1997-01-01FIX AVAILABLE
CVE-1999-0095 3 exploits
CVSS 10.0 HIGH 1988-10-01
CVE-2006-0058 1 exploit
CVSS 7.6 HIGH 2006-03-22FIX AVAILABLE
CVE-2003-0681 2 exploits
CVSS 7.5 HIGH 2003-09-18FIX AVAILABLE
CVE-2021-3618 1 exploit
CVSS 7.4 HIGH 2021-06-24
CVE-1999-0769 1 exploit
CVSS 7.2 HIGH 1999-08-25
CVE-1999-0130 1 exploit
CVSS 7.2 HIGH 1996-11-16
CVE-1999-1580
CVSS 7.2 HIGH 1995-08-23
CVE-2006-1015 1 exploit
CVSS 6.4 MEDIUM 2006-03-06FIX AVAILABLE
CVE-2023-51765 2 exploits
CVSS 5.3 MEDIUM 2023-12-23FIX AVAILABLE
CVE-2009-1490 2 exploits
CVSS 5.0 MEDIUM 2009-05-05FIX AVAILABLE
CVE-1999-1109 1 exploit
CVSS 5.0 MEDIUM 1999-12-22FIX AVAILABLE
CVE-1999-0393 1 exploit
CVSS 5.0 MEDIUM 1999-01-01FIX AVAILABLE
CVE-2002-1165 2 exploits
CVSS 4.6 MEDIUM 2002-10-03
CVE-2001-0653 4 exploits
CVSS 4.6 MEDIUM 2001-09-20
CVE-2001-0588
CVSS 4.6 MEDIUM 2001-07-27
CVE-2001-1349
CVSS 3.7 LOW 2001-05-28FIX AVAILABLE
CVE-2006-1014 1 exploit
CVSS 3.2 LOW 2006-03-06FIX AVAILABLE
CVE-2002-1827 2 exploits
CVSS 2.1 LOW 2002-12-31FIX AVAILABLE
CVE-2001-0715
CVSS 2.1 LOW 2001-10-12FIX AVAILABLE