CVE-2001-0623

Sendfile 1.x/2.1 - Local Privileged Arbitrary Command Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2001-0623 has a selected CVSS score of 4.6; EIP currently links 2 catalogued exploits.

Description

sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

Proofs of concept

2

Catalogued exploits

ExploitDBSendfile 1.x/2.1 - Local Privileged Arbitrary Command ExecutionExploitDB exploitby psheepNot analyzed1 file
ExploitDB
PoC details
ExploitDBSendfile 1.x/2.1 - Forced Privilege Lowering FailureExploitDB exploitby Cade CairnsNot analyzed1 file
ExploitDB
PoC details

References

4