Vulnerability CVE-2017-10140


Published: 2018-04-16

Description:
Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.

 References:
http://seclists.org/oss-sec/2017/q3/285
http://www.postfix.org/announcements/postfix-3.2.2.html

Copyright 2018, cxsecurity.com

 

Back to Top