Vulnerability Details CVE-2001-1349
Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.6%
CVSS Severity
CVSS v2 Score 3.7
References
- http://archives.neohapsis.com/archives/sendmail/2001-q2/0001.html
- http://razor.bindview.com/publish/advisories/adv_sm8120.html
- http://rhn.redhat.com/errata/RHSA-2001-106.html
- http://www.iss.net/security_center/static/6633.php
- http://www.securityfocus.com/archive/1/187127
- http://www.securityfocus.com/bid/2794
- http://archives.neohapsis.com/archives/sendmail/2001-q2/0001.html
- http://razor.bindview.com/publish/advisories/adv_sm8120.html
- http://rhn.redhat.com/errata/RHSA-2001-106.html
- http://www.iss.net/security_center/static/6633.php
- http://www.securityfocus.com/archive/1/187127
- http://www.securityfocus.com/bid/2794
Products affected by CVE-2001-1349
-
cpe:2.3:a:sendmail:sendmail:8.10
-
cpe:2.3:a:sendmail:sendmail:8.10.1
-
cpe:2.3:a:sendmail:sendmail:8.10.2
-
cpe:2.3:a:sendmail:sendmail:8.11.0
-
cpe:2.3:a:sendmail:sendmail:8.11.1
-
cpe:2.3:a:sendmail:sendmail:8.11.2
-
cpe:2.3:a:sendmail:sendmail:8.11.3
-
cpe:2.3:a:sendmail:sendmail:8.12