CVE-2001-0715

Severity Score

2.1

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by setting debugging flags to enable debug mode.

*Credits: N/A

CVSS Scores

NISTv2 2.1

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2001-09-25 CVE Reserved
2001-10-12 CVE Published
2023-09-12 EPSS Updated
2024-08-08 CVE Updated
2024-08-08 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (2)

URL	Tag	Source

URL	Date	SRC
http://razor.bindview.com/publish/advisories/adv_sm812.html	2024-08-08

URL	Date	SRC

URL	Date	SRC
ftp://patches.sgi.com/support/free/security/advisories/20011101-01-I	2011-03-08

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Sendmail Search vendor "Sendmail"		Sendmail Search vendor "Sendmail" for product "Sendmail"				<= 8.12.1 Search vendor "Sendmail" for product "Sendmail" and version " <= 8.12.1"		-		Affected