Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the category part of debugger (-d) command line arguments, which is interpreted as a negative number.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Sendmail | Sendmail | 8.11.4 | 8.11.4 |
Sendmail | Sendmail | 8.12 | 8.12 |
Sendmail | Sendmail | 8.11.1 | 8.11.1 |
Sendmail | Sendmail | 8.11.0 | 8.11.0 |
Sendmail | Sendmail | 8.11.3 | 8.11.3 |
Sendmail | Sendmail | 8.12 | 8.12 |
Sendmail | Sendmail | 8.12 | 8.12 |
Sendmail | Sendmail | 8.12 | 8.12 |
Sendmail | Sendmail | 8.12 | 8.12 |
Sendmail | Sendmail | 8.11.2 | 8.11.2 |
Sendmail | Sendmail | 8.11.5 | 8.11.5 |