PT-2019-15707 · Gnu+1 · Gnu Mailutils+1

Publicado 2019-11-11 · Atualizado 2024-06-15 · CVE-2019-18862

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU Mailutils versions prior to 3.8

Description The issue allows local privilege escalation in the url mode when maidag in GNU Mailutils is installed setuid.

Recommendations For GNU Mailutils versions prior to 3.8, update to version 3.8 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

ALT-PU-2020-2883

ALT-PU-2020-2927

CVE-2019-18862

OPENSUSE-SU-2024:11035-1

Produtos afetados

Alt Linux

Gnu Mailutils

Referências · 13

• 🔥 https://exploit-db.com/exploits/47703 · Exploit
• https://ubuntu.com/security/CVE-2019-18862 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-18862 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-18862 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-18862 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2019-18862 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2019-18862 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-18862 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11035-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-18862 · Aviso do Fabricante
• https://security.gentoo.org/glsa/202006-12 · Aviso do Fabricante
• https://git.savannah.gnu.org/cgit/mailutils.git/tree/NEWS · Aviso do Fabricante
• http://packetstormsecurity.com/files/155425/GNU-Mailutils-3.7-Privilege-Escalation.html · Nota