CVE-2014-3956
Beschrijving
The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.
Vendors
Affected products
References
- ftp.sendmail.org
- advisories.mageia.org
- lists.fedoraproject.org
- lists.opensuse.org
- lists.opensuse.org
- packetstormsecurity.com
- secunia.com
- secunia.com
- security.gentoo.org
- www.freebsd.org
- www.mandriva.com
- www.mandriva.com
- www.securityfocus.com
- www.securitytracker.com
- www.sendmail.com
- www.slackware.com
- h20566.www2.hpe.com