CVE-2001-1349 Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.
LowCVSS 3.7
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sendmail | = 8.10 | No fix listed |
| sendmail | = 8.10.1 | No fix listed |
| sendmail | = 8.10.2 | No fix listed |
| sendmail | = 8.11.0 | No fix listed |
| sendmail | = 8.11.1 | No fix listed |
| sendmail | = 8.11.2 | No fix listed |
| sendmail | = 8.11.3 | No fix listed |
| sendmail | = 8.12-beta7 | No fix listed |
References
- archives.neohapsis.com
- 20010528 Unsafe Signal Handling in Sendmail exploit patch vendor-advisory
- RHSA-2001:106 vendor-advisory
- sendmail-signal-handling(6633) vdb-entry
- 20010529 sendmail 8.11.4 and 8.12.0.Beta10 available (fwd) mailing-list vendor-advisory
- 2794 patch vdb-entry vendor-advisory