CVEvulnerability
CVE-2001-0623
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-08-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.
Affected configurations
• sendfile sendfile
References
- http://www.debian.org/security/2001/dsa-050 www.debian.org
- http://www.debian.org/security/2001/dsa-052 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6430 exchange.xforce.ibmcloud.com
- http://www.debian.org/security/2001/dsa-050 www.debian.org
- http://www.debian.org/security/2001/dsa-052 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6430 exchange.xforce.ibmcloud.com