Vulnerability Report

CVE-2001-0653

Title: Sendmail debugger (-d) category parameter integer overflow

Auth Bypass

Proof Of Concept

PoC Available for CVE-2001-0653

CWE Category NVD-CWE-noinfo
Published Date Sep 20, 2001
Modified Date Jun 16, 2026
Exploit Status Available
Score 4.6 CVSS v2.0
Exploit Probability (EPSS)
1.18%

Vulnerability Summary

CVE-2001-0653: Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.

Impacted Vendors

M
metainfo 1
S
sendmail 1
R
redhat 1
E
eric_allman 1

Reference Links

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-017.txt.asc http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000412 http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-032-01 http://marc.info/?l=bugtraq&m=99841063100516&w=2 http://rhn.redhat.com/errata/RHSA-2001-106.html http://www.calderasystems.com/support/security/advisories/CSSA-2001-032.0.txt http://www.ciac.org/ciac/bulletins/l-133.shtml http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-075.php3 http://www.novell.com/linux/security/advisories/2001_028_sendmail_txt.html http://www.securityfocus.com/bid/3163 http://www.sendmail.org/8.11.html http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-007 https://exchange.xforce.ibmcloud.com/vulnerabilities/7016 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-017.txt.asc http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000412 http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-032-01 http://marc.info/?l=bugtraq&m=99841063100516&w=2 http://rhn.redhat.com/errata/RHSA-2001-106.html http://www.calderasystems.com/support/security/advisories/CSSA-2001-032.0.txt http://www.ciac.org/ciac/bulletins/l-133.shtml http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-075.php3 http://www.novell.com/linux/security/advisories/2001_028_sendmail_txt.html http://www.securityfocus.com/bid/3163 http://www.sendmail.org/8.11.html http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-007 https://exchange.xforce.ibmcloud.com/vulnerabilities/7016
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
4.6
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:L/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2001-0653 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/21060
View Code
Exploit-DB https://www.exploit-db.com/exploits/21061
View Code
Exploit-DB https://www.exploit-db.com/exploits/21062
View Code
Exploit-DB https://www.exploit-db.com/exploits/21063
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.