PT-2001-1821 · Simple Asynchronous File Transfer · Saft

Published 2001-07-27 · Updated 2017-12-19 · CVE-2001-0623

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: SAFT (affected versions not specified)

Description: The issue is related to the sendfiled component of Simple Asynchronous File Transfer (SAFT) on various Linux systems. It does not properly drop privileges when sending notification emails, allowing local attackers to gain privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-0623

Affected Products

Saft

References · 6

• 🔥 https://exploit-db.com/exploits/20798 · Exploit
• 🔥 https://exploit-db.com/exploits/20795 · Exploit
• http://debian.org/security/2001/dsa-050 · Vendor Advisory
• http://debian.org/security/2001/dsa-052 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0623 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6430 · Note