Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-1999-0145

22
FAUCET Score

CVE-1999-0145 describes a critical vulnerability in Sendmail, specifically affecting versions by eric_allman, where the "WIZ" command was enabled. This flaw allowed an attacker to gain root access on the compromised system. With a CVSS score of 7.2 (HIGH), this vulnerability has a local attack vector, low attack complexity, and results in complete compromise of confidentiality, integrity, and availability. Despite its high severity and potential for full system control, there is no evidence of active exploitation, nor are there publicly available exploit codes in Metasploit, Nuclei, or ExploitDB, and it lacks community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
All Versions ImpactedCPE matchmatch criteria
cpe:2.3:a:eric_allman:sendmail:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.2HIGH

AV:L/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Exploitability Score
3.9
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.99%
Probability of exploitation in next 30 days
EPSS Percentile
58.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0099 is in the 78th percentile among its peer group of 3,236 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

microsoftpatch availablevia msrc
Product: cbl2 sendmail 8.15.2-46 on CBL Mariner 2.0Fixed in: 8.15.2-46
microsoftpatch availablevia msrc
Product: 18884-16823Fixed in: 8.15.2-46

Vendor Advisories (1)

microsoft2000-Oct/CVE-1999-0145Important

Sendmail WIZ command enabled, allowing root access.

Oct 2, 2000

References

seclists.org / fulldisclosure/2019/Jun/16
www2.dataguard.no / bugtraq/1995_1/0332.html
alw.nih.gov / Security/Docs/admin-guide-to-cracking.101.html
cert.org / advisories/CA-1990-11.html
US Government Resource
cert.org / advisories/CA-1993-14.html
US Government Resource
openwall.com / lists/oss-security/2019/06/05/4
openwall.com / lists/oss-security/2019/06/06/1