Sendmail contains a flaw that may allow a remote attacker to gain access to unauthorized privileges. The issue is triggered when the 'wiz' command is enabled by default, which may allow a remote attacker to gain access to root privileges, resulting in a loss of integrity.
Classification
Location:
Remote / Network Access
Attack Type:
Authentication Management
Impact:
Loss of Integrity
Exploit:
Exploit Public
Disclosure:
Vendor Verified,
Uncoordinated Disclosure,
Discovered in the Wild
Solution
Upgrade to version 4.22 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
