CVE-2017-10140 Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later...
HighCVSS 7.8
EPSS 0.55%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/db5.3(Debian:12) | < 5.3.28-13.1 | 5.3.28-13.1 |
| debian/db5.3(Debian:13) | < 5.3.28-13.1 | 5.3.28-13.1 |
| debian/db5.3(Debian:14) | < 5.3.28-13.1 | 5.3.28-13.1 |
| postfix | < 2.11.10 | 2.11.10 |
| postfix | >= 3.0.0, < 3.0.10 | 3.0.10 |
| postfix | >= 3.1.0, < 3.1.6 | 3.1.6 |
| postfix | >= 3.2.0, < 3.2.2 | 3.2.2 |
References
- Debian Security Tracker CVE-2017-10140 vendor-advisory
- [oss-sec] 20170611 Berkeley DB reads DB_CONFIG from cwd exploit mailing-list third-party-advisory
- www.postfix.org vendor-advisory
- RHSA-2019:0366 third-party-advisory vendor-advisory
- www.oracle.com
- bugs.debian.org issue-tracking