CVE-2001-0623
sendfile - Privilege Escalation via Notification Email Handling
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0623. PoCs published by psheep, Cade Cairns.
AI-analyzed exploit summary This exploit leverages a privilege escalation vulnerability in the Sendfile daemon (SAFT protocol) by injecting arbitrary commands into a user's configuration file, leading to execution with elevated privileges. It compiles helper binaries to achieve a root shell via setuid manipulation.
Description
sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.
Exploits (2)
This exploit leverages a privilege escalation vulnerability in the Sendfile daemon (SAFT protocol) by injecting arbitrary commands into a user's configuration file, leading to execution with elevated privileges. It compiles helper binaries to achieve a root shell via setuid manipulation.
This exploit leverages a serialization error in the Sendfile daemon (sendfiled) to execute arbitrary commands as root. It manipulates the configuration file to insert a malicious notification command, which triggers the execution of a suid root shell wrapper.