Vulnerability in Sendmail

CVE-2003-0308

The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.

EPSS: 0.004 (32.5th percentile) — read the EPSS interpretation.

Affected products

Sendmail — versions 8.9.3, 8.12.3, 8.12.9
Debian Debian_linux — versions 3.0
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN)
cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM)