Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-35766

Опубликовано: 28 дек. 2020
Источник: nvd
CVSS3: 7.8
CVSS2: 4.4
EPSS Низкий

Описание

The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:opendkim:opendkim:*:*:*:*:*:*:*:*
Версия до 2.10.3 (включая)

EPSS

Процентиль: 35%
0.00144
Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 5 лет назад

The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation.

CVSS3: 7.8
debian
около 5 лет назад

The test suite in libopendkim in OpenDKIM through 2.10.3 allows local ...

github
больше 3 лет назад

The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation.

EPSS

Процентиль: 35%
0.00144
Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-59