CVE-2001-0623

Published: Aug 2, 2001Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.

Affected (1)

Products: Sendfile: Sendfile

Sendfile

1 product

Sendfile

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sendfile Sendfile	All versions

References (6)

http://www.debian.org/security/2001/dsa-050

Source: cve@mitre.org

http://www.debian.org/security/2001/dsa-052

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/6430

Source: cve@mitre.org

http://www.debian.org/security/2001/dsa-050

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2001/dsa-052

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/6430

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.