CVE-2001-0588: sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attack...

Security readout for executives and security teams

This CVE describes an old local privilege-escalation issue in sendmail 8.9.3 as shipped with MMDF 2.43.3b on SCO OpenServer 5.0.6. A person who already has local access could potentially gain additional privileges through a buffer overflow. There is no source evidence here of remote exploitation or current active abuse. Exposure is likely limited to legacy SCO OpenServer 5.0.6 systems using MMDF 2.43.3b with the bundled sendmail 8.9.3. Modern Linux or BSD sendmail deployments are not identified as affected by the provided sources. Prioritize this if the organization still operates SCO OpenServer 5.0.6, especially shared or internet-adjacent mail infrastructure. Otherwise, the main action is legacy asset discovery and documentation, not emergency response. Mitigation focus: Identify any SCO OpenServer 5.0.6 systems still in use.; Check whether MMDF 2.43.3b bundled sendmail 8.9.3 is installed.; Review SCO advisory SSE072B or vendor guidance for applicable fixes..

Prepared

Jul 1, 2026, 09:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.