NVD

Id
78113  
Name
CVE-2001-0653  
Description
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the "category" part of debugger (-d) command line arguments, which is interpreted as a negative number.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2001-09-20  
Modified Date
2016-10-17  
Seq
2001-0653  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
390980 78113 CVE-2001-0653 NetBSD-SA2001-017  View
390981 78113 CVE-2001-0653 CLA-2001:412  View
390982 78113 CVE-2001-0653 IMNX-2001-70-032-01  View
390983 78113 CVE-2001-0653 20010821 *ALERT* UPDATED BID 3163 (URGENCY 6.58): Sendmail Debugger Arbitrary Code Execution Vulnerability (fwd)  View
390984 78113 CVE-2001-0653 RHSA-2001:106  View
390985 78113 CVE-2001-0653 CSSA-2001-032.0  View
390986 78113 CVE-2001-0653 L-133  View
390987 78113 CVE-2001-0653 MDKSA-2001:075  View
390988 78113 CVE-2001-0653 SuSE-SA:2001:028  View
390989 78113 CVE-2001-0653 3163  View
390990 78113 CVE-2001-0653 http://www.sendmail.org/8.11.html  View
390991 78113 CVE-2001-0653 HPSBTL0112-007  View
390992 78113 CVE-2001-0653 sendmail-debug-signed-int-overflow(7016)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64157 JVNDB-2001-000131 Sendmail の signed int 変数における任意のコードを実行される脆弱性 Sendmailには、コマンドラインオプション -d を解釈するルーチンで利用されている signed int 変数に、オーバーフローが発生する脆弱性が存在します。 CVE-2001-0653 3461 CVE-2001-0653 78113 4.6 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000131.html 2001-08-20 2007-04-01 View