ID CVE-2001-0653
Summary Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.
References
Vulnerable Configurations
  • cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*
    cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*
  • cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*
    cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*
  • cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*
    cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*
  • cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*
    cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*
  • cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*
    cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*
  • cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*
    cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*
  • cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*
    cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*
  • cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*
    cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*
  • cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*
    cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*
  • cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*
    cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*
  • cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*
    cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 03-05-2018 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
rhsa
id RHSA-2001:106
refmap via4
bid 3163
bugtraq 20010821 *ALERT* UPDATED BID 3163 (URGENCY 6.58): Sendmail Debugger Arbitrary Code Execution Vulnerability (fwd)
caldera
  • CSSA-2001-032.0
  • CSSA-2001-SCO.31
ciac L-133
conectiva CLA-2001:412
confirm http://www.sendmail.org/8.11.html
hp HPSBTL0112-007
immunix IMNX-2001-70-032-01
mandrake MDKSA-2001:075
netbsd NetBSD-SA2001-017
suse SuSE-SA:2001:028
xf sendmail-debug-signed-int-overflow(7016)
Last major update 03-05-2018 - 01:29
Published 20-09-2001 - 04:00
Last modified 03-05-2018 - 01:29
Back to Top