Описание
masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping.
Ссылки
- Broken Link
- Issue TrackingThird Party Advisory
- Third Party Advisory
- Broken Link
- Issue TrackingThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.2.21 (включая) до 0.2.30 (включая)
cpe:2.3:a:marmaro:masqmail:*:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.0039
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-273
Связанные уязвимости
CVSS3: 9.8
ubuntu
около 6 лет назад
masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping.
CVSS3: 9.8
debian
около 6 лет назад
masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c ...
github
почти 4 года назад
masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping.
EPSS
Процентиль: 60%
0.0039
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-273