CVE-2001-0653: sendmail

EPSS trend

Probability

1.18%

Chance of exploitation in the next 30 days

Percentile

67%

Versus all other CVEs

30-day change

0.00 pp

From 1.18% on 18-09-2026

18-09-202618-10-2026

EPSS score

1.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

5 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocallinuxVerified
Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (1)
Maturity: weaponized
exploit-databaselocallinuxVerified
Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (2)
Maturity: weaponized

Show all 5 exploits

exploit-databaselocallinuxVerified
Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (3)
Maturity: weaponized
exploit-databaselocallinuxVerified
Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (4)
Maturity: weaponized

References

12 links

www.linux-mandrake.com/en/security/2001/MDKSA-2001-075.php3Vendor AdvisoryX Refsource MANDRAKE
www.novell.com/linux/security/advisories/2001_028_sendmail_txt.htmlVendor AdvisoryX Refsource SUSE
exchange.xforce.ibmcloud.com/vulnerabilities/7016VDB EntryX Refsource XF
www.securityfocus.com/bid/3163VDB EntryX Refsource BIDExploitPatchVendor Advisory
www.calderasystems.com/support/security/advisories/CSSA-2001-032.0.txtVendor AdvisoryX Refsource CALDERA
rhn.redhat.com/errata/RHSA-2001-106.htmlVendor AdvisoryX Refsource REDHAT
download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-032-01Vendor AdvisoryX Refsource IMMUNIX
www.ciac.org/ciac/bulletins/l-133.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIAC
marc.info?l=bugtraq&m=99841063100516&w=2Mailing ListX Refsource BUGTRAQ
www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-007Vendor AdvisoryX Refsource HP

Show all 12 references

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000412Vendor AdvisoryX Refsource CONECTIVA
www.sendmail.org/8.11.htmlX Refsource CONFIRM

Related vulnerabilities

CVE-2003-0681applemac_os_x+1422.36%23y ago18-09-2003 04:00A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.CVE-2003-0694applemac_os_x+1866.18%23y ago18-09-2003 04:00The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.CVE-2003-0161compaqtru64+938.79%23y ago01-04-2003 05:00The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.CVE-2021-3618alpinenginx+602.03%4y ago23-03-2022 00:00ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.CVE-2014-3956debiansendmail+70.64%12y ago04-06-2014 10:00The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.CVE-2001-1349sendmailsendmail0.42%23y ago02-04-2003 05:00Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.

All vulnerabilities insendmail

CVE-2001-0653: sendmail

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References