PT-2001-1896 · Sendmail · Sendmail

Publicado 2001-10-12 · Atualizado 2008-09-05 · CVE-2001-0713

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Sendmail versions prior to 8.12.1

Description: The issue allows local users to gain privileges through malformed arguments in custom configuration files loaded with the -C option. This can be achieved with configuration file names containing characters with the high bit set, such as short macro names, variable settings processed by the setoption function, or Modifiers settings processed by the getmodifiers function.

Recommendations: For Sendmail versions prior to 8.12.1, update to version 8.12.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2001-0713

Produtos afetados

Sendmail

Referências · 4

• http://iss.net/security_center/static/7192.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0713 · Nota de Segurança
• http://securityfocus.com/bid/3377 · Nota
• http://razor.bindview.com/publish/advisories/adv_sm812.html · Aviso do Fabricante