CVE-2001-0713
First published: Fri Oct 12 2001(Updated: )
Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sendmail | <=8.12.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2001-0713?
CVE-2001-0713 is considered a high-severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2001-0713?
To fix CVE-2001-0713, upgrade Sendmail to version 8.12.1 or later, where this vulnerability is addressed.
What versions of Sendmail are affected by CVE-2001-0713?
CVE-2001-0713 affects all Sendmail versions prior to 8.12.1.
What are the potential consequences of CVE-2001-0713?
The potential consequences of CVE-2001-0713 include unauthorized privilege escalation by local users.
Can CVE-2001-0713 be exploited remotely?
CVE-2001-0713 is a local privilege escalation vulnerability, meaning it cannot be exploited remotely.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/references
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/sendmail
- canonical/sendmail
- version/sendmail/8.12.1