# CVE-1999-0204: Sendmail remote command execution via ident

Source: https://junglewise.ai/threats/cve-1999-0204-sendmail-remote-command-execution-via-ident  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 1997-01-01. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-1999-0204 · Severity: critical · CVSS 10 · Published 1997-01-01

Sendmail, a widely used mail transfer agent for routing and delivering email, contains a critical security flaw. An unauthenticated remote attacker can exploit this vulnerability to execute commands with administrative (root) privileges. This could lead to a complete takeover of the mail server, allowing unauthorized access to all emails and the ability to disrupt communications or launch further attacks on the network.

Technologies: [Eric Allman Sendmail](https://junglewise.ai/threats/technologies/sendmail). Vendors: [Eric Allman](https://junglewise.ai/threats/vendors/eric-allman).

## Quick answers

**Is CVE-1999-0204 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-1999-0204 being exploited in the wild.

**How severe is CVE-1999-0204?** Critical severity, with a CVSS score of 10, published 1 January 1997.

**Which products and versions are affected?** Sendmail Sendmail 8.6.9.

**Is there a fix for CVE-1999-0204?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-1999-0204 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-1999-0204?** Check whether you run Eric Allman Sendmail. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A remote code execution vulnerability exists in Sendmail 8.6.9 due to improper handling of responses from the Identification Protocol (ident). By providing a specially crafted ident response during a connection, a remote, unauthenticated attacker can trigger a buffer overflow or similar memory corruption to execute arbitrary commands with root privileges. This attack is performed over the network without requiring user interaction. Organizations should upgrade to a patched version of Sendmail or disable ident lookups if they are not required for operations.

## Affected products

- Sendmail Sendmail 8.6.9

## Timeline

- 1997-01-01: disclosed: Initial publication date recorded in NVD.

## References

- [https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0204](https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0204)

## Related threats

- [Sendmail command injection via pipe character](https://junglewise.ai/threats/cve-1999-0163-sendmail-command-injection-via-pipe-character)
- [Sendmail arbitrary command execution via SMTP bounce manipulation](https://junglewise.ai/threats/cve-1999-0203-sendmail-arbitrary-command-execution-via-smtp-bounce-manipulation)
- [Sendmail WIZ command enabled allowing root access](https://junglewise.ai/threats/cve-1999-0145-sendmail-wiz-command-enabled-allowing-root-access)
- [Sendmail debug command enabled remote command execution](https://junglewise.ai/threats/cve-1999-0095-sendmail-debug-command-enabled-remote-command-execution)