PT-2008-4373 · Postfix+1 · Postfix+1

Roman Medina-Heigl Hernandez + 1 · Publicado 2008-08-14 · Atualizado 2023-02-13 · CVE-2008-2936

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Postfix versions prior to 2.3.15 Postfix versions 2.4 prior to 2.4.8 Postfix versions 2.5 prior to 2.5.4 Postfix versions 2.6 prior to 2.6-20080814

Description The issue allows local users to append e-mail messages to a file to which a root-owned symlink points, by creating a hard link to this symlink and then sending a message. This can be leveraged to gain privileges if there is a symlink to an init script.

Recommendations For Postfix versions prior to 2.3.15, update to version 2.3.15 or later. For Postfix versions 2.4 prior to 2.4.8, update to version 2.4.8 or later. For Postfix versions 2.5 prior to 2.5.4, update to version 2.5.4 or later. For Postfix versions 2.6 prior to 2.6-20080814, update to version 2.6-20080814 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-2936

DSA-1629-1

DSA-1629-2

DTSA-155-1

RHSA-2008:0839

RHSA-2008_0839

Produtos afetados

Postfix

Red Hat

Referências · 39

• 🔥 https://exploit-db.com/exploits/6337 · Exploit
• ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.3.15.HISTORY · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00002.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2008-2936 · Nota
• http://kb.cert.org/vuls/id/938323 · Nota
• https://issues.rpath.com/browse/RPL-2689 · Nota
• ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-2.6-20080814.HISTORY · Nota
• https://access.redhat.com/errata/RHSA-2008:0839 · Nota
• http://secunia.com/advisories/31530 · Nota
• http://securityreason.com/securityalert/4160 · Nota
• http://secunia.com/advisories/32231 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-2936 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44460 · Nota
• http://secunia.com/advisories/31500 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2008-2936 · Aviso do Fabricante