Vulnerability in Sendmail
CVE-2001-1349
Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.
EPSS: 0.004 (34.3th percentile) — read the EPSS interpretation.
Affected products
- Sendmail — versions 8.10, 8.10.1, 8.10.2
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (x_refsource_BINDVIEW, Exploit, vendor-advisory, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2001-1349?
- CVE-2001-1349 is a vulnerability in Sendmail. Published 2001-05-28.
- Is CVE-2001-1349 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.