Description
Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.
References
- 2794 vdb-entry
- 20010529 sendmail 8.11.4 and 8.12.0.Beta10 available (fwd) mailing-list
- http://archives.neohapsis.com/archives/sendmail/2001-q2/0001.html
- sendmail-signal-handling(6633) vdb-entry
- RHSA-2001:106 vendor-advisory
- 20010528 Unsafe Signal Handling in Sendmail vendor-advisory