CVE-1999-1506: Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user...

Security readout for executives and security teams

This very old CVE affects SMI Sendmail 4.0 and earlier on SunOS up to 4.0.3. The reported impact is that a remote attacker could access the user bin account. It matters mainly where legacy SunOS mail systems still exist or have been preserved in production, labs, or embedded environments. Likely limited to obsolete SunOS environments running SMI Sendmail 4.0 or earlier. Modern systems are unlikely to be exposed unless they host legacy compatibility, archival, lab, or isolated operational technology mail services. Prioritize as a legacy-risk discovery item. It is not supported by current active-exploitation evidence in the bundle, but any internet-reachable affected host represents unacceptable operational debt and should be retired, isolated, or remediated quickly. Mitigation focus: Inventory SunOS systems and mail gateways for SMI Sendmail versions.; Check CERT and vendor guidance for the historical corrective action.; Retire or isolate obsolete SunOS mail hosts where feasible..

Prepared

Jul 1, 2026, 08:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.