CVE-2001-0623 EXPLOIT
4.6
MEDIUM · CVSS 2.0 · EPSS 0.8% (pctl 56)
Patch early
A public exploit exists.
Description
sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.
Scoring
| CVSS | 4.6 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 0.8% — more likely to be exploited than 56% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2001-08-02 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| sendfile | sendfile |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Sendfile 1.x/2.1 - Local Privileged Arbitrary Command Execution | 2001-04-24 |
| exploit-db | Sendfile 1.x/2.1 - Forced Privilege Lowering Failure | 2001-04-24 |
References
→ the Explorer · watch your stack · NVD