FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

FreeBSD -- sendmail improper close-on-exec flag handling

Affected packages
10.0 <= FreeBSD < 10.0_4
9.2 <= FreeBSD < 9.2_7
9.1 <= FreeBSD < 9.1_14
8.4 <= FreeBSD < 8.4_11

Details

VuXML ID 6d9eadaf-6007-11e6-a6c3-14dae9d210b8
Discovery 2014-06-03
Entry 2016-08-11

Problem Description:

There is a programming error in sendmail(8) that prevented open file descriptors have close-on-exec properly set. Consequently a subprocess will be able to access all open files that the parent process have open.

Impact:

A local user who can execute their own program for mail delivery will be able to interfere with an open SMTP connection.

References

FreeBSD Advisory SA-14:11.sendmail