Summary
The remote sendmail server, according to its version number, might be vulnerable to a queue destruction when a local user runs
sendmail -q -h1000
If you system does not allow users to process the queue (which is the default), you are not vulnerable.
Solution
upgrade to the latest version of Sendmail or
do not allow users to process the queue (RestrictQRun option) Note : This vulnerability is _local_ only
Severity
Classification
-
CVE CVE-2001-0714 -
CVSS Base Score: 2.1
AV:L/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities