## Check Wizard Vulnerability

### Risk Factor: 10

### Machines Affected:

Probably none anymore. This is an extremely old sendmail bug (pre Internet Worm days).

### Description:

You could telnet to port 25 and enter the command wiz, and if you then responded to the server with the correct default password (assuming a non-frozen configuration file) then additional commands were enabled as well as a shell. If the configuration file got frozen and there was no password information stored in it, then no password was required.

### Consequences:

A remote user could get a root shell by telnetting to port 25 and entering the command wiz.

### Fix:

Get the latest version of sendmail