First published: Mon May 28 2001(Updated: )
Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sendmail | =8.10 | |
Sendmail | =8.10.1 | |
Sendmail | =8.10.2 | |
Sendmail | =8.11.0 | |
Sendmail | =8.11.1 | |
Sendmail | =8.11.2 | |
Sendmail | =8.11.3 | |
Sendmail | =8.12-beta7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-1349 is considered a high severity vulnerability due to the potential for denial of service and privilege escalation.
To fix CVE-2001-1349, upgrade Sendmail to version 8.11.4 or higher, or apply the relevant patches.
CVE-2001-1349 affects Sendmail versions prior to 8.11.4 and specific beta versions of 8.12.0.
CVE-2001-1349 primarily allows local users to exploit the vulnerability, but it can indirectly lead to remote impacts.
The potential impacts of CVE-2001-1349 include denial of service, heap corruption, and unauthorized privilege escalation.