Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (data loss) by (1) setting a high initial message hop count option (-h), which causes Sendmail to drop queue entries, (2) via the -qR option, or (3) via the -qS option.
References
Link | Resource |
---|---|
http://razor.bindview.com/publish/advisories/adv_sm812.html | Patch Vendor Advisory |
ftp://patches.sgi.com/support/free/security/advisories/20011101-01-I |
Configurations
Information
Published : 2001-10-29 21:00
Updated : 2008-09-05 13:24
NVD link : CVE-2001-0714
Mitre link : CVE-2001-0714
JSON object : View
CWE
Products Affected
sendmail
- sendmail