CVE-1999-1580

CVE-1999-1580 describes a local privilege escalation vulnerability affecting SunOS sendmail versions 5.59 through 5.65. By manipulating the IFS variable and providing specially crafted values to the -oR option, local users can leverage sendmail's use of popen to execute arbitrary commands with root privileges. This vulnerability carries a high CVSS score of 7.2, indicating a low attack complexity and full confidentiality, integrity, and availability impact. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code in common databases like Metasploit or ExploitDB, or significant community discussion or media coverage.