CVE-2014-3956

The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags…

published June 4, 2014

CVSS
—
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00635 · 49.8th percentile
Published
2014-06-04T10:00Z
EPSS history
Timeline
  • 04 JUN 10:00Z
    The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags…
    cvelistv5