PT-2001-1786 · Sendmail · Sendmail

Publicado 2001-07-27 · Atualizado 2008-09-10 · CVE-2001-0588

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: sendmail version 8.9.3

Description: A buffer overflow issue exists in the command, allowing a local attacker to gain additional privileges. This issue is related to the first argument of the command.

Recommendations: For sendmail version 8.9.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-0588

Produtos afetados

Sendmail

Referências · 3

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-03/0417.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0588 · Nota de Segurança
• http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html · Nota