{ "id": "CVE-2001-0653", "sourceIdentifier": "cve@mitre.org", "published": "2001-09-20T04:00:00.000", "lastModified": "2018-05-03T01:29:13.163", "vulnStatus": "Modified", "descriptions": [ { "lang": "en", "value": "Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector": "LOCAL", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 4.6 }, "baseSeverity": "MEDIUM", "exploitabilityScore": 3.9, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*", "matchCriteriaId": "84E6ECDA-DF65-47FF-A42F-FD5C1D864FA3" }, { "vulnerable": true, "criteria": "cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*", "matchCriteriaId": "7AA859AF-4E4E-4077-8E98-523E617A1DDC" }, { "vulnerable": true, "criteria": "cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*", "matchCriteriaId": "A9791650-C367-43B6-A0F4-5BB56CE10778" }, { "vulnerable": true, "criteria": "cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*", "matchCriteriaId": "8340DDA8-77DD-4AEB-B267-F86F64A851B3" }, { "vulnerable": true, "criteria": "cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*", "matchCriteriaId": "07DCBBEE-1DF0-40FE-B755-1FC35CF16788" }, { "vulnerable": true, "criteria": "cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*", "matchCriteriaId": "581626E7-47B5-4819-B34F-B6DFD07A12F9" }, { "vulnerable": true, "criteria": "cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*", "matchCriteriaId": "BD99394C-5408-4A01-8D4E-417FFFFDE9C7" }, { "vulnerable": true, "criteria": "cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*", "matchCriteriaId": "AAB59A24-87DE-4CAD-A2BA-AFCC0B2A55B2" }, { "vulnerable": true, "criteria": "cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*", "matchCriteriaId": "97D641EF-0B69-45A1-B85E-3C9C93AB9D42" }, { "vulnerable": true, "criteria": "cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*", "matchCriteriaId": "8972211B-6A5B-4095-9CBB-CEF4C23C9C65" }, { "vulnerable": true, "criteria": "cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*", "matchCriteriaId": "8F81A2AD-90A0-4B97-86A3-92690A0FCA71" } ] } ] } ], "references": [ { "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-017.txt.asc", "source": "cve@mitre.org" }, { "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000412", "source": "cve@mitre.org" }, { "url": "http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-032-01", "source": "cve@mitre.org" }, { "url": "http://marc.info/?l=bugtraq&m=99841063100516&w=2", "source": "cve@mitre.org" }, { "url": "http://rhn.redhat.com/errata/RHSA-2001-106.html", "source": "cve@mitre.org" }, { "url": "http://www.calderasystems.com/support/security/advisories/CSSA-2001-032.0.txt", "source": "cve@mitre.org" }, { "url": "http://www.ciac.org/ciac/bulletins/l-133.shtml", "source": "cve@mitre.org" }, { "url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-075.php3", "source": "cve@mitre.org" }, { "url": "http://www.novell.com/linux/security/advisories/2001_028_sendmail_txt.html", "source": "cve@mitre.org" }, { "url": "http://www.securityfocus.com/bid/3163", "source": "cve@mitre.org", "tags": [ "Exploit", "Patch", "Vendor Advisory" ] }, { "url": "http://www.sendmail.org/8.11.html", "source": "cve@mitre.org" }, { "url": "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-007", "source": "cve@mitre.org" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7016", "source": "cve@mitre.org" } ] }