Notifications for a CVE
Stay informed of any changes for a specific CVE.
CVE Descriptions
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
CVE Informations
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C | nvd@nist.gov |
EPSS
EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.
EPSS Score
The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.
EPSS Percentile
The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
Products Mentioned
Configuraton 0
Eric_allman>>Sendmail >> Version 8.6
Eric_allman>>Sendmail >> Version 8.7.1
Eric_allman>>Sendmail >> Version 8.7.2
Eric_allman>>Sendmail >> Version 8.7.3
Eric_allman>>Sendmail >> Version 8.7.4
Eric_allman>>Sendmail >> Version 8.7.5
Configuraton 0
Bsdi>>Bsd_os >> Version 2.1
- Bsdi>>Bsd_os >> Version 2.1 (Open CPE detail)
Digital>>Osf_1 >> Version 1.3.2
Freebsd>>Freebsd >> Version 2.1.5
- Freebsd>>Freebsd >> Version 2.1.5 (Open CPE detail)
Hp>>Hp-ux >> Version 10.01
- Hp>>Hp-ux >> Version 10.01 (Open CPE detail)
Hp>>Hp-ux >> Version 10.10
- Hp>>Hp-ux >> Version 10.10 (Open CPE detail)
Hp>>Hp-ux >> Version 10.20
- Hp>>Hp-ux >> Version 10.20 (Open CPE detail)
Ibm>>Aix >> Version 3.2
- Ibm>>Aix >> Version 3.2 (Open CPE detail)
Ibm>>Aix >> Version 4.1
- Ibm>>Aix >> Version 4.1 (Open CPE detail)
Ibm>>Aix >> Version 4.2
- Ibm>>Aix >> Version 4.2 (Open CPE detail)
Redhat>>Linux >> Version 3.0.3
- Redhat>>Linux >> Version 3.0.3 (Open CPE detail)
Sco>>Internet_faststart >> Version 1.0
Sco>>Openserver >> Version 5.0
Sco>>Openserver >> Version 5.0.2
