CVE-2001-0713

Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://razor.bindview.com/publish/advisories/adv_sm812.html	Vendor Advisory
http://www.iss.net/security_center/static/7192.php
http://www.securityfocus.com/bid/3377
http://razor.bindview.com/publish/advisories/adv_sm812.html	Vendor Advisory
http://www.iss.net/security_center/static/7192.php
http://www.securityfocus.com/bid/3377

Configurations

Configuration 1 (hide)

cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*

History

20 Nov 2024, 23:35

Type	Values Removed	Values Added
References	~~() http://razor.bindview.com/publish/advisories/adv_sm812.html - Vendor Advisory~~	() http://razor.bindview.com/publish/advisories/adv_sm812.html - Vendor Advisory
References	~~() http://www.iss.net/security_center/static/7192.php -~~	() http://www.iss.net/security_center/static/7192.php -
References	~~() http://www.securityfocus.com/bid/3377 -~~	() http://www.securityfocus.com/bid/3377 -

Information

Published : 2001-10-30 05:00

Updated : 2024-11-20 23:35

NVD link : CVE-2001-0713

Mitre link : CVE-2001-0713

CVE.ORG link : CVE-2001-0713

JSON object : View

Products Affected

sendmail

sendmail

CWE

NVD-CWE-Other

{"id": "CVE-2001-0713", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-10-30T05:00:00.000", "references": [{"url": "http://razor.bindview.com/publish/advisories/adv_sm812.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/7192.php", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3377", "source": "cve@mitre.org"}, {"url": "http://razor.bindview.com/publish/advisories/adv_sm812.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.iss.net/security_center/static/7192.php", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/3377", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function."}], "lastModified": "2024-11-20T23:35:59.400", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BF8119A-B4E5-4490-B872-3322CE3FFA37", "versionEndIncluding": "8.12.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}