CVE-1999-0131 — Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users

Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users

Published Sep 29, 1999

No CVSS score

EPSS 0.57%

Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.

No remediation recorded yet.

0.57% 0.00571

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00571

2022–2026

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.57% (0.00571)	45.31th	v5 (v2026.06.15)
Jun 15, 2026	0.58% (0.00576)	42.75th	v5 (v2026.06.15)
Mar 17, 2025	0.10% (0.00096)	24.74th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00890)	30.33th	v2 (v2022.01.01)
Sep 10, 2022	0.89% (0.00890)	28.64th	v2 (v2022.01.01)
Apr 1, 2022	0.89% (0.00890)	26.62th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00890)	12.04th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://www.securityfocus.com/bid/717		vdb-entryx_refsource_BID

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 29, 1999

Updated Aug 1, 2024

Reserved Jun 7, 1999

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a