Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Local denial of service vulnerability in sendmail

Package(s):

sendmail

CVE #(s):

Created:

August 14, 2002

Updated:

August 14, 2002

Description:

A local user can stop local mail service by holding an exclusive read lock on specific sendmail files. The user must have permission to read a file such as /var/log/sendmail.st, which is world readable by default.

The problem is described in this advisory

Alerts:

Conectiva

CLA-2002:xxx-1

2002-08-05

(Log in to post comments)