PT-2001-1845 · Sendmail · Sendmail

Published 2001-09-20 · Updated 2018-05-03 · CVE-2001-0653

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Sendmail versions 8.10.0 through 8.11.5 Sendmail version 8.12.0 beta

Description: The issue allows local users to potentially gain privileges by modifying process memory. This is achieved by providing a large value in the category part of the debugger (-d) command line arguments, which is then interpreted as a negative number.

Recommendations: For Sendmail versions 8.10.0 through 8.11.5, consider restricting access to the debugger (-d) command line arguments to minimize the risk of exploitation. For Sendmail version 8.12.0 beta, avoid using the category part of the debugger (-d) command line arguments until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-0653

Affected Products

Sendmail

References · 18

• 🔥 https://exploit-db.com/exploits/21063 · Exploit
• 🔥 https://exploit-db.com/exploits/21062 · Exploit
• 🔥 http://securityfocus.com/bid/3163 · Exploit
• 🔥 https://exploit-db.com/exploits/21061 · Exploit
• 🔥 https://exploit-db.com/exploits/21060 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0653 · Security Note
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-017.txt.asc · Vendor Advisory
• http://novell.com/linux/security/advisories/2001_028_sendmail_txt.html · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000412 · Vendor Advisory
• http://calderasystems.com/support/security/advisories/CSSA-2001-032.0.txt · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2001-106.html · Vendor Advisory
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-007 · Vendor Advisory
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-075.php3 · Vendor Advisory
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-032-01 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=99841063100516&w=2 · Note