Skip to content

CVE-2001-1349

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of...

3.7 Low

CVE-2001-1349 is a low vulnerability (CVSS 3.7) in Sendmail, published May 28, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. No source names a fixed version.

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.

Exploit likelihood

0.42%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 3.7

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.

Record: CVE-2001-1349
CVSS 2.0: 3.7 LowAV:L/AC:H/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.

Record: CVE-2001-1349
Updated: 2026-11-02

EUVDEUVD-2001-1330 No score

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.

Record: EUVD-2001-1330
Updated: 2026-11-03

GitHub AdvisoriesGHSA-9xq9-r7q7-g4c3 No score

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of...

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.

Record: GHSA-9xq9-r7q7-g4c3
Updated: 2026-11-02

Affected products

sendmail

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References