{"id":"CVE-2001-0653","aliases":["EUVD-2001-0639","GHSA-pw59-xvgj-36g7"],"status":"published","title":"Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and...","description":"Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01177,"percentile":0.67804,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2001-09-20T04:00:00Z","modified":"2026-06-16T21:54:41Z","exploits":[{"source":"exploitdb","id":"EDB-21060","title":"Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (1)","type":"local","platform":"linux","date":"2001-08-17","verified":true,"url":"https://www.exploit-db.com/exploits/21060"},{"source":"exploitdb","id":"EDB-21061","title":"Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (2)","type":"local","platform":"linux","date":"2001-08-17","verified":true,"url":"https://www.exploit-db.com/exploits/21061"},{"source":"exploitdb","id":"EDB-21062","title":"Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (3)","type":"local","platform":"linux","date":"2001-08-17","verified":true,"url":"https://www.exploit-db.com/exploits/21062"},{"source":"exploitdb","id":"EDB-21063","title":"Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (4)","type":"local","platform":"linux","date":"2001-08-17","verified":true,"url":"https://www.exploit-db.com/exploits/21063"}],"products":[{"vendor":"sendmail","product":"sendmail"}],"references":[{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-075.php3","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-017.txt.asc","tags":["vendor-advisory","x_refsource_NETBSD","x_transferred"]},{"url":"http://www.novell.com/linux/security/advisories/2001_028_sendmail_txt.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7016","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/3163","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-032.0.txt","tags":["vendor-advisory","x_refsource_CALDERA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2001-106.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-032-01","tags":["vendor-advisory","x_refsource_IMMUNIX","x_transferred"]},{"url":"http://www.ciac.org/ciac/bulletins/l-133.shtml","tags":["third-party-advisory","government-resource","x_refsource_CIAC","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=99841063100516\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-007","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000412","tags":["vendor-advisory","x_refsource_CONECTIVA","x_transferred"]},{"url":"http://www.sendmail.org/8.11.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2001-0653"},{"url":"https://github.com/advisories/GHSA-pw59-xvgj-36g7"}],"sources":{"cve":[{"id":"CVE-2001-0653","description":"Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.","status":"published","published":"2002-03-09T05:00:00Z","modified":"2024-08-08T04:30:05.999Z","updated_at":"2026-11-02T14:34:43.358691Z"}],"euvd":[{"id":"EUVD-2001-0639","description":"Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.","status":"published","published":"2002-03-09T05:00:00Z","modified":"2024-08-08T04:30:05Z","updated_at":"2026-11-03T01:14:50.641084Z"}],"ghsa":[{"id":"GHSA-pw59-xvgj-36g7","title":"Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and...","description":"Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.","status":"published","published":"2022-05-03T03:07:09Z","modified":"2023-02-01T05:00:59Z","updated_at":"2026-11-02T14:49:38.712812Z"}],"nvd":[{"id":"CVE-2001-0653","description":"Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.","status":"published","published":"2001-09-20T04:00:00Z","modified":"2026-06-16T21:54:41.97Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:40.572315Z"}]}}