The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.

According to the version of the sendmail packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The sm_close_on_exec function in conf.c in sendmail     before 8.14.9 has arguments in the wrong order, and     consequently skips setting expected FD_CLOEXEC flags,     which allows local users to access unintended     high-numbered file descriptors via a custom     mail-delivery program.(CVE-2014-3956)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the sendmail packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The Sendmail program is a very widely used Mail     Transport Agent (MTA).MTAs send mail from one machine     to another. Sendmail is not a client program, which you     use to read your email. Sendmail is a behind-the-scenes     program which actually moves your email over networks     or the Internet to where you want it to go.If you ever     need to reconfigure Sendmail, you will also need to     have the sendmail-cf package installed. If you need     documentation on Sendmail, you can install the     sendmail-doc package.Security Fix(es):The     sm_close_on_exec function in conf.c in sendmail before     8.14.9 has arguments in the wrong order, and     consequently skips setting expected FD_CLOEXEC flags,     which allows local users to access unintended     high-numbered file descriptors via a custom     mail-delivery program.(CVE-2014-3956)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3956 The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.

Updated sendmail packages fix security vulnerability :

Sendmail before 8.14.9 does not properly closing file descriptors before executing programs. This bug could enable local users to interfere with an open SMTP connection if they can execute their own program for mail delivery (e.g., via procmail or the prog mailer) (CVE-2014-3956).

The remote Solaris system is missing necessary patches to address security updates :

  - The sm_close_on_exec function in conf.c in sendmail     before 8.14.9 has arguments in the wrong order, and     consequently skips setting expected FD_CLOEXEC flags,     which allows local users to access unintended     high-numbered file descriptors via a custom     mail-delivery program. (CVE-2014-3956)

The remote host is affected by the vulnerability described in GLSA-201412-32 (sendmail: Information disclosure)

    The sm_close_on_exec function in conf.c has arguments in the wrong       order.
  Impact :

    A local attacker could get access to unintended high-numbered file       descriptors via a specially crafted program.
  Workaround :

    There is no known workaround at this time.

sendmail has been updated to fix the following security issue :

  - Not properly closing file descriptors before executing     programs. (CVE-2014-3956)

This is an update that fixes bug which can lead to sendmail leaking file descriptors to processes it spawns.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

sendmail was updated to properly close file descriptors before executing programs.

These security issues were fixed :

  - Not properly closing file descriptors before executing     programs (CVE-2014-3956).

New sendmail packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue.

The remote mail server is running a version of Sendmail prior to 8.14.9. It is, therefore, affected by a flaw related to file descriptors and the 'close-on-exec' flag that may allow a local attacker to cause unspecified impact on open SMTP connections.

ID	Name	Product	Family	Severity
132196	EulerOS 2.0 SP3 : sendmail (EulerOS-SA-2019-2661)	Nessus	Huawei Local Security Checks	low
131823	EulerOS 2.0 SP5 : sendmail (EulerOS-SA-2019-2549)	Nessus	Huawei Local Security Checks	low
131594	EulerOS 2.0 SP2 : sendmail (EulerOS-SA-2019-2440)	Nessus	Huawei Local Security Checks	low
108897	AIX 5.3 TL 12 : sendmail (IJ03273)	Nessus	AIX Local Security Checks	low
108896	AIX 7.1 TL 5 : sendmail (IJ03121)	Nessus	AIX Local Security Checks	low
108895	AIX 7.2 TL 2 : sendmail (IJ02920)	Nessus	AIX Local Security Checks	low
108894	AIX 7.2 TL 1 : sendmail (IJ02919)	Nessus	AIX Local Security Checks	low
108893	AIX 7.2 TL 0 : sendmail (IJ02918)	Nessus	AIX Local Security Checks	low
108892	AIX 7.1 TL 4 : sendmail (IJ02917)	Nessus	AIX Local Security Checks	low
108891	AIX 6.1 TL 9 : sendmail (IJ02915)	Nessus	AIX Local Security Checks	low
82381	Mandriva Linux Security Advisory : sendmail (MDVSA-2015:128)	Nessus	Mandriva Local Security Checks	low
80770	Oracle Solaris Third-Party Patch Update : sendmail (cve_2014_3956_information_disclosure)	Nessus	Solaris Local Security Checks	low
80209	GLSA-201412-32 : sendmail: Information disclosure	Nessus	Gentoo Local Security Checks	low
76954	Mandriva Linux Security Advisory : sendmail (MDVSA-2014:147)	Nessus	Mandriva Local Security Checks	low
76372	SuSE 11.3 Security Update : sendmail (SAT Patch Number 9345)	Nessus	SuSE Local Security Checks	low
76151	Fedora 19 : sendmail-8.14.7-2.fc19 (2014-7095)	Nessus	Fedora Local Security Checks	low
76104	openSUSE Security Update : sendmail (openSUSE-SU-2014:0804-1)	Nessus	SuSE Local Security Checks	low
74503	Fedora 20 : sendmail-8.14.8-2.fc20 (2014-7093)	Nessus	Fedora Local Security Checks	low
74332	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : sendmail (SSA:2014-156-04)	Nessus	Slackware Local Security Checks	low
74289	Sendmail < 8.14.9 close-on-exec SMTP Connection Manipulation	Nessus	SMTP problems	low

Detections

Analytics

CVE-2014-3956

low

Tenable Plugins

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low