{"id":"CVE-2014-3956","aliases":["DEBIAN-CVE-2014-3956","EUVD-2014-3889","GHSA-frwj-4rf4-3wjf","MGASA-2014-0270","UBUNTU-CVE-2014-3956"],"status":"published","title":"The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong...","description":"The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.","severity":{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0063,"percentile":0.50456,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2014-06-04T10:00:00Z","modified":"2026-10-23T15:47:25Z","fixes":[{"ecosystem":"Debian:12","package":"sendmail","fixed_in":["8.14.4-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sendmail","fixed_in":["8.14.4-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sendmail","fixed_in":["8.14.4-6"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"sendmail","fixed_in":["8.14.6-2.1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"sendmail","fixed_in":["8.14.7-3.1.mga4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"sendmail","fixed_in":["8.14.4-4.1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"sendmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.4-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sendmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.4-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sendmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.4-6"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"sendmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.6-2.1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"sendmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.7-3.1.mga4"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"sendmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.4-4.1ubuntu1.1"}]}],"versions":["8.14.4-2.1ubuntu4","8.14.4-2.1ubuntu5","8.14.4-4.1ubuntu1"]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"freebsd","product":"freebsd"},{"vendor":"hp","product":"hpux"},{"vendor":"sendmail","product":"sendmail"}],"references":[{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05216368","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/58628","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A11.sendmail.asc","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:128","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://packetstormsecurity.com/files/126975/Slackware-Security-Advisory-sendmail-Updates.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"ftp://ftp.sendmail.org/pub/sendmail/RELEASE_NOTES","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201412-32.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.sendmail.com/sm/open_source/download/8.14.9/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix","report"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-06/msg00032.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:147","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134349.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-06/msg00033.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/57455","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/67791","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://advisories.mageia.org/MGASA-2014-0270.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2014\u0026m=slackware-security.728644","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1030331","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3956"},{"url":"https://github.com/advisories/GHSA-frwj-4rf4-3wjf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3956","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0270.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-June/134349.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3956","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2014/06/03/1","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3956","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-3956","description":"The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.","status":"published","published":"2014-06-04T10:00:00Z","modified":"2024-08-06T10:57:18.265Z","updated_at":"2026-11-02T14:33:44.23164Z"}],"euvd":[{"id":"EUVD-2014-3889","description":"The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.","status":"published","published":"2014-06-04T10:00:00Z","modified":"2024-08-06T10:57:18Z","updated_at":"2026-11-03T01:57:08.947358Z"}],"ghsa":[{"id":"GHSA-frwj-4rf4-3wjf","title":"The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong...","description":"The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.","status":"published","published":"2022-05-17T19:57:37Z","modified":"2023-01-28T05:04:53Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:44:15.556193Z"}],"nvd":[{"id":"CVE-2014-3956","description":"The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.","status":"published","published":"2014-06-04T11:19:13.89Z","modified":"2026-06-17T00:09:12.18Z","cvss":[{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:54.464139Z"}],"osv":[{"id":"CVE-2014-3956","description":"The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.","status":"published","published":"2014-06-04T11:19:13Z","modified":"2026-04-16T06:26:10.774765225Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-3956","description":"The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.","status":"published","published":"2014-06-04T11:19:13.89Z","modified":"2026-10-23T15:47:25.811594562Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"MGASA-2014-0270","title":"Updated sendmail packages fix CVE-2014-3956","description":"Updated sendmail packages fix security vulnerability:\n\nSendmail before 8.14.9 does not properly closing file descriptors before\nexecuting programs. This bug could enable local users to interfere with\nan open SMTP connection if they can execute their own program for mail\ndelivery (e.g., via procmail or the prog mailer) (CVE-2014-3956).\n","status":"published","published":"2014-06-20T19:41:07Z","modified":"2026-04-16T06:24:13.817037002Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"UBUNTU-CVE-2014-3956","description":"The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.","status":"published","published":"2014-06-04T11:19:00Z","modified":"2026-04-22T09:43:47.365527Z","updated_at":"2026-11-02T15:54:09.010095Z"}]}}