Oval Definition:
oval:org.mitre.oval:def:18596
Revision Date
:
2014-06-23
Version
:
8
Title
:
DSA-1629-1 postfix - privilege escalation
Description
:
Sebastian Krahmer discovered that Postfix, a mail transfer agent, incorrectly checks the ownership of a mailbox. In some configurations, this allows for appending data to arbitrary files as root.
Family
:
unix
Class
:
patch
Status
:
ACCEPTED
Reference(s)
:
CVE-2008-2936
DSA-1629-1
Platform(s)
:
Debian GNU/Linux 4.0
Product(s)
:
postfix
Definition Synopsis
Debian GNU/Linux 4.0 is installed.
AND
postfix DPKG is earlier than 2.3.8-2etch1
BACK