CVE-2001-0653
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and...
CVE-2001-0653 is a medium vulnerability (CVSS 4.6) in Sendmail, published September 20, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 68th percentile. No source names a fixed version.
- Severity
- 4.6 MediumCVSS 2.0, NVD
- Exploit chance
- 1.18%EPSS, 68th percentile
- Exploitation
- None known4 public exploits
- Fixed in
- No fix listedNo source names one
Description
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (1) | 2001-08-17 |
| Exploit-DB | Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (2) | 2001-08-17 |
| Exploit-DB | Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (3) | 2001-08-17 |
| Exploit-DB | Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (4) | 2001-08-17 |
What each source reports
NVD Score used
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.
- Record
CVE-2001-0653- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.
- Record
CVE-2001-0653- Updated
- 2026-11-02
EUVDEUVD-2001-0639No score
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.
- Record
EUVD-2001-0639- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pw59-xvgj-36g7No score
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and...
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.
- Record
GHSA-pw59-xvgj-36g7- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
linux-mandrake.com/en/security/2001/MDKSA-2001-075.php3
novell.com/linux/security/advisories/2001_028_sendmail_txt.html
exchange.xforce.ibmcloud.com/vulnerabilities/7016
securityfocus.com/bid/3163
calderasystems.com/support/security/advisories/CSSA-2001-032.0.txt
rhn.redhat.com/errata/RHSA-2001-106.html
Show 8 moreShow less
download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-032-01
ciac.org/ciac/bulletins/l-133.shtml
marc.info?l=bugtraq&m=99841063100516&w=2
www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-007
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000412
sendmail.org/8.11.html
nvd.nist.gov/vuln/detail/CVE-2001-0653
github.com/advisories/GHSA-pw59-xvgj-36g7