1.9

CVE-2014-3956

The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Update- Version <= 9.2
Hp ≫ Hpux Version <= b.11.31
Fedoraproject ≫ Fedora Version20
Sendmail ≫ Sendmail Version <= 8.14.8
Sendmail ≫ Sendmail Version8.6.7
Sendmail ≫ Sendmail Version8.7.6
Sendmail ≫ Sendmail Version8.7.7
Sendmail ≫ Sendmail Version8.7.8
Sendmail ≫ Sendmail Version8.7.9
Sendmail ≫ Sendmail Version8.7.10
Sendmail ≫ Sendmail Version8.8.8
Sendmail ≫ Sendmail Version8.9.0
Sendmail ≫ Sendmail Version8.9.1
Sendmail ≫ Sendmail Version8.9.2
Sendmail ≫ Sendmail Version8.9.3
Sendmail ≫ Sendmail Version8.10
Sendmail ≫ Sendmail Version8.10.0
Sendmail ≫ Sendmail Version8.10.1
Sendmail ≫ Sendmail Version8.10.2
Sendmail ≫ Sendmail Version8.11.0
Sendmail ≫ Sendmail Version8.11.1
Sendmail ≫ Sendmail Version8.11.2
Sendmail ≫ Sendmail Version8.11.3
Sendmail ≫ Sendmail Version8.11.4
Sendmail ≫ Sendmail Version8.11.5
Sendmail ≫ Sendmail Version8.11.6
Sendmail ≫ Sendmail Version8.11.7
Sendmail ≫ Sendmail Version8.12.0
Sendmail ≫ Sendmail Version8.12.1
Sendmail ≫ Sendmail Version8.12.2
Sendmail ≫ Sendmail Version8.12.3
Sendmail ≫ Sendmail Version8.12.4
Sendmail ≫ Sendmail Version8.12.5
Sendmail ≫ Sendmail Version8.12.6
Sendmail ≫ Sendmail Version8.12.7
Sendmail ≫ Sendmail Version8.12.8
Sendmail ≫ Sendmail Version8.12.9
Sendmail ≫ Sendmail Version8.12.10
Sendmail ≫ Sendmail Version8.12.11
Sendmail ≫ Sendmail Version8.13.0
Sendmail ≫ Sendmail Version8.13.1
Sendmail ≫ Sendmail Version8.13.2
Sendmail ≫ Sendmail Version8.13.3
Sendmail ≫ Sendmail Version8.13.4
Sendmail ≫ Sendmail Version8.13.5
Sendmail ≫ Sendmail Version8.13.6
Sendmail ≫ Sendmail Version8.13.7
Sendmail ≫ Sendmail Version8.13.8
Sendmail ≫ Sendmail Version8.14.0
Sendmail ≫ Sendmail Version8.14.1
Sendmail ≫ Sendmail Version8.14.2
Sendmail ≫ Sendmail Version8.14.3
Sendmail ≫ Sendmail Version8.14.4
Sendmail ≫ Sendmail Version8.14.5
Sendmail ≫ Sendmail Version8.14.6
Sendmail ≫ Sendmail Version8.14.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.1% 0.286
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 1.9 3.4 2.9
AV:L/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.securityfocus.com/bid/67791
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030331
Third Party Advisory
VDB Entry