## Description

Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### eric_allman - sendmail

Affected Versions:

- 8.6

### eric_allman - sendmail

Affected Versions:

- 8.7.1

### eric_allman - sendmail

Affected Versions:

- 8.7.2

### eric_allman - sendmail

Affected Versions:

- 8.7.3

### eric_allman - sendmail

Affected Versions:

- 8.7.4

### eric_allman - sendmail

Affected Versions:

- 8.7.5

### bsdi - bsd_os

Affected Versions:

- 2.1

### digital - osf_1

Affected Versions:

- 1.3.2

### freebsd - freebsd

Affected Versions:

- 2.1.5

### hp - hp-ux

Affected Versions:

- 10.01

### hp - hp-ux

Affected Versions:

- 10.10

### hp - hp-ux

Affected Versions:

- 10.20

### ibm - aix

Affected Versions:

- 3.2

### ibm - aix

Affected Versions:

- 4.1

### ibm - aix

Affected Versions:

- 4.2

### redhat - linux

Affected Versions:

- 3.0.3

### sco - internet_faststart

Affected Versions:

- 1.0

### sco - openserver

Affected Versions:

- 5.0

### sco - openserver

Affected Versions:

- 5.0.2

## References

- http://www.securityfocus.com/bid/717
- http://www.securityfocus.com/bid/717

Neural Processor Active