CVE-2001-1349

LowCVSS 3.7/10Last modified Jun 16, 2026

Description

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.

Metrics

CVSS 2.0 3.7/10AV:L/AC:H/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/sendmail/2001-q2/0001.html
http://razor.bindview.com/publish/advisories/adv_sm8120.htmlExploit, Patch, Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2001-106.html
http://www.iss.net/security_center/static/6633.php
http://www.securityfocus.com/archive/1/187127Vendor Advisory
http://www.securityfocus.com/bid/2794Patch, Vendor Advisory
http://archives.neohapsis.com/archives/sendmail/2001-q2/0001.html
http://razor.bindview.com/publish/advisories/adv_sm8120.htmlExploit, Patch, Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2001-106.html
http://www.iss.net/security_center/static/6633.php
http://www.securityfocus.com/archive/1/187127Vendor Advisory
http://www.securityfocus.com/bid/2794Patch, Vendor Advisory

Timeline

Published: May 28, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-13507.5Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as oth CVE-2001-13517.5Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users vi CVE-2001-13527.5Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users vi CVE-2001-13532.6ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabl CVE-2001-13544.6NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashi CVE-2001-135510.0Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, CVE-2001-135610.0NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote a CVE-2001-13577.5Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown cons CVE-2001-13587.2Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library f CVE-2001-135910.0Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which a CVE-2001-13607.2Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.CVE-2001-13617.5Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto lin