Skip to navigation

Security Advisory New sendmail packages available which fix a local root exploit

Advisory: RHSA-2001:106-08
Type: Security Advisory
Severity: N/A
Issued on: 2001-08-28
Last updated on: 2001-10-22
Affected Products: Red Hat Linux 6.2
Red Hat Linux 7.0
Red Hat Linux 7.1
CVEs (cve.mitre.org): CVE-2001-0653
CVE-2001-1349

Details

An input validation error in the debugging functionality of all currently
released versions of sendmail can enable a local user to gain root
access. New packages that fix this problem are available for Red Hat Linux
5.2, 6.2, 7.0, and 7.1.

Sendmail, the low-level system for sending and receiving email for Red
Hat Linux, has an input validation flaw in part of its debugging code.
This flaw could be exploited by an attacker who already has local access
to a system and wants to gain root privileges.

Red Hat is issuing new sendmail packages that correct this flaw for all our
currently supported Red Hat Linux platforms. All users are strongly
advised to apply these fixes.


Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains
the desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this to be an easier way to apply updates. To use Red Hat
Network, launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Updated packages

Red Hat Linux 6.2

SRPMS:
sendmail-8.11.6-1.6.y.src.rpm
File outdated by:  RHSA-2003:120
    MD5: 9430ad1f58b31fedbd2c3118e38c91bb
 
Alpha:
ftp://updates.redhat.com/rhn/repository/NULL/sendmail/8.11.6-1.6.y/alpha/sendmail-8.11.6-1.6.y.alpha.rpm
Missing file
    MD5: 8fe26b4facd48fb59d431952cb16660f
ftp://updates.redhat.com/rhn/repository/NULL/sendmail-cf/8.11.6-1.6.y/alpha/sendmail-cf-8.11.6-1.6.y.alpha.rpm
Missing file
    MD5: 5a3c1b19e26925cf8d8f31cf70678f3a
ftp://updates.redhat.com/rhn/repository/NULL/sendmail-doc/8.11.6-1.6.y/alpha/sendmail-doc-8.11.6-1.6.y.alpha.rpm
Missing file
    MD5: fc2b2f2087c9e0a22c7e2b92dc05eaba
 
IA-32:
sendmail-8.11.6-1.6.y.i386.rpm
File outdated by:  RHSA-2003:120
    MD5: f677c0bc542495680a47c6b3185d3f44
sendmail-cf-8.11.6-1.6.y.i386.rpm
File outdated by:  RHSA-2003:120
    MD5: afc7efca38e40f1affbdc9fdce90a433
sendmail-doc-8.11.6-1.6.y.i386.rpm
File outdated by:  RHSA-2003:120
    MD5: dfe5b8d85adba6f17da61a1d25f64f42
 
Sparc:
ftp://updates.redhat.com/rhn/repository/NULL/sendmail/8.11.6-1.6.y/sparc/sendmail-8.11.6-1.6.y.sparc.rpm
Missing file
    MD5: 157b06887265d528675c1c68721cdbf6
ftp://updates.redhat.com/rhn/repository/NULL/sendmail-cf/8.11.6-1.6.y/sparc/sendmail-cf-8.11.6-1.6.y.sparc.rpm
Missing file
    MD5: 38602d5d6296b7b9ca578d4c8f446168
ftp://updates.redhat.com/rhn/repository/NULL/sendmail-doc/8.11.6-1.6.y/sparc/sendmail-doc-8.11.6-1.6.y.sparc.rpm
Missing file
    MD5: 941a815f6b4a309f20b37e1a36e4e40f
 
Red Hat Linux 7.0

SRPMS:
sendmail-8.11.6-2.7.0.src.rpm
File outdated by:  RHSA-2003:120
    MD5: c1fd7503743391edc745bad7da351f09
 
Alpha:
ftp://updates.redhat.com/rhn/repository/NULL/sendmail/8.11.6-2.7.0/alpha/sendmail-8.11.6-2.7.0.alpha.rpm
Missing file
    MD5: cf7a3902265300daadb306e4e42e7ea8
ftp://updates.redhat.com/rhn/repository/NULL/sendmail-cf/8.11.6-2.7.0/alpha/sendmail-cf-8.11.6-2.7.0.alpha.rpm
Missing file
    MD5: 9052d47e15e6d1686289a95654498c3f
ftp://updates.redhat.com/rhn/repository/NULL/sendmail-doc/8.11.6-2.7.0/alpha/sendmail-doc-8.11.6-2.7.0.alpha.rpm
Missing file
    MD5: 6e846271f7d0ac2094ebc0d22121fd4a
 
IA-32:
sendmail-8.11.6-2.7.0.i386.rpm
File outdated by:  RHSA-2003:120
    MD5: cad605de705ac26fb846253a98927536
sendmail-cf-8.11.6-2.7.0.i386.rpm
File outdated by:  RHSA-2003:120
    MD5: d0ad6e46ac60cd445810378933a5afbe
sendmail-doc-8.11.6-2.7.0.i386.rpm
File outdated by:  RHSA-2003:120
    MD5: 1b6ef91eafdf85c711e7da792b3294d7
 
Red Hat Linux 7.1

SRPMS:
sendmail-8.11.6-2.7.1.src.rpm
File outdated by:  RHSA-2003:283
    MD5: f8ba51c13b3845a234ab077417e23122
 
Alpha:
ftp://updates.redhat.com/rhn/repository/NULL/sendmail/8.11.6-2.7.1/alpha/sendmail-8.11.6-2.7.1.alpha.rpm
Missing file
    MD5: 14111e7dc86569b0490a2b7e11288993
ftp://updates.redhat.com/rhn/repository/NULL/sendmail-cf/8.11.6-2.7.1/alpha/sendmail-cf-8.11.6-2.7.1.alpha.rpm
Missing file
    MD5: 8a15cd0349711ffadc8f4a0041cf6b30
ftp://updates.redhat.com/rhn/repository/NULL/sendmail-doc/8.11.6-2.7.1/alpha/sendmail-doc-8.11.6-2.7.1.alpha.rpm
Missing file
    MD5: d73f611abcb237f1a0e25f56ecdaa714
 
IA-32:
sendmail-8.11.6-2.7.1.i386.rpm
File outdated by:  RHSA-2003:283
    MD5: 331c95ac2c260436643839b3ac47c71f
sendmail-cf-8.11.6-2.7.1.i386.rpm
File outdated by:  RHSA-2003:283
    MD5: 360c54c392c09065479e45dd66f84f65
sendmail-doc-8.11.6-2.7.1.i386.rpm
File outdated by:  RHSA-2003:283
    MD5: 010e026659d20fa7fdc855b7e090f042
 
IA-64:
ftp://updates.redhat.com/rhn/repository/NULL/sendmail/8.11.6-2.7.1/ia64/sendmail-8.11.6-2.7.1.ia64.rpm
Missing file
    MD5: d9b97da0204c5340f64f3100782900cd
ftp://updates.redhat.com/rhn/repository/NULL/sendmail-cf/8.11.6-2.7.1/ia64/sendmail-cf-8.11.6-2.7.1.ia64.rpm
Missing file
    MD5: 55742cdca260b38d9654cc3db33dc41b
ftp://updates.redhat.com/rhn/repository/NULL/sendmail-doc/8.11.6-2.7.1/ia64/sendmail-doc-8.11.6-2.7.1.ia64.rpm
Missing file
    MD5: 5395f4ee43d5e45535f96b2416ef5b5b
 

Bugs fixed (see bugzilla for more information)

52194 - SUID sendmail allows local overflow


References

https://www.redhat.com/security/data/cve/CVE-2001-0653.html
https://www.redhat.com/security/data/cve/CVE-2001-1349.html
Bugtraq ID 3163. See http://www.securityfocus.com/bid/3163 for more
information.

Problem discovered by Cade Cairns <cairnsc@securityfocus.com>.

Keywords

debug, input, local, mta, root, sendmail, smtp, validation


These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/