Published: 20/09/2001 Updated: 03/05/2018

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

VMScore: 480

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Sendmail 8.10.0 up to and including 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sendmail sendmail 8.12
sendmail sendmail 8.11.0
sendmail sendmail 8.11.1
sendmail sendmail 8.11.2
sendmail sendmail 8.11.3
sendmail sendmail 8.11.4
sendmail sendmail 8.11.5

source: wwwsecurityfocuscom/bid/3163/info An input validation error exists in Sendmail's debugging functionality The problem is the result of the use of signed integers in the program's tTflag() function, which is responsible for processing arguments supplied from the command line with the '-d' switch and writing the values to it's in ...

source: wwwsecurityfocuscom/bid/3163/info An input validation error exists in Sendmail's debugging functionality The problem is the result of the use of signed integers in the program's tTflag() function, which is responsible for processing arguments supplied from the command line with the '-d' switch and writing the values to it' ...

source: wwwsecurityfocuscom/bid/3163/info An input validation error exists in Sendmail's debugging functionality The problem is the result of the use of signed integers in the program's tTflag() function, which is responsible for processing arguments supplied from the command line with the '-d' switch and writing the values to it's inte ...

source: wwwsecurityfocuscom/bid/3163/info An input validation error exists in Sendmail's debugging functionality The problem is the result of the use of signed integers in the program's tTflag() function, which is responsible for processing arguments supplied from the command line with the '-d' switch and writing the values to it's ...

NVD-CWE-Other http://www.securityfocus.com/bid/3163 http://www.sendmail.org/8.11.html http://www.calderasystems.com/support/security/advisories/CSSA-2001-032.0.txt http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000412 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-007 http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-032-01 http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-075.php3 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-017.txt.asc http://rhn.redhat.com/errata/RHSA-2001-106.html http://www.novell.com/linux/security/advisories/2001_028_sendmail_txt.html http://www.ciac.org/ciac/bulletins/l-133.shtml http://marc.info/?l=bugtraq&m=99841063100516&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/7016 https://nvd.nist.gov https://www.exploit-db.com/exploits/21061/

CVE-2001-0653

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect