CVE ID:	CVE-2014-3956
Description:	The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high- numbered file descriptors via a custom mail-delivery program.
Test IDs:	1.3.6.1.4.1.25623.1.0.867877   1.3.6.1.4.1.25623.1.1.2.2019.2440   1.3.6.1.4.1.25623.1.0.121318   1.3.6.1.4.1.25623.1.1.10.2014.0270   1.3.6.1.4.1.25623.1.1.13.2014.156.04   1.3.6.1.4.1.25623.1.1.4.2014.0872.1   1.3.6.1.4.1.25623.1.0.867920   1.3.6.1.4.1.25623.1.1.2.2019.2549   1.3.6.1.4.1.25623.1.1.2.2019.2661
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3956 BugTraq ID: 67791 http://www.securityfocus.com/bid/67791 http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134349.html FreeBSD Security Advisory: FreeBSD-SA-14:11 http://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A11.sendmail.asc http://security.gentoo.org/glsa/glsa-201412-32.xml http://www.mandriva.com/security/advisories?name=MDVSA-2014:147 http://www.mandriva.com/security/advisories?name=MDVSA-2015:128 http://packetstormsecurity.com/files/126975/Slackware-Security-Advisory-sendmail-Updates.html http://www.securitytracker.com/id/1030331 http://secunia.com/advisories/57455 http://secunia.com/advisories/58628 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.728644 SuSE Security Announcement: openSUSE-SU-2014:0804 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-06/msg00032.html SuSE Security Announcement: openSUSE-SU-2014:0805 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-06/msg00033.html