CVE-2001-0623: Sendfile

Medium severity, CVSS 4.6. EPSS: 0.8% chance of exploitation in the next 30 days.

sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.

Affected products

• Sendfile Sendfile: any version

Published 2001-08-02. Last modified 2026-06-16.