Strix
26.1K

CVE-2001-0713

UnknownEPSS 0.33%

Last modified

CVE-2001-0713 is a vulnerability of currently unknown severity. Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.

Description

Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function.

Metrics

EPSS Probability
0.33%

24.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
SendmailSendmail<= 8.12.1

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2001-0713?
Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function.
How severe is CVE-2001-0713?
Severity scoring for CVE-2001-0713 is pending analysis. The EPSS model estimates a 0.33% probability of exploitation in the next 30 days.
How do I fix CVE-2001-0713?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2001-0713?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST