Oval Definition:	oval:org.opensuse.security:def:202028007
Revision Date: 2022-06-30 Version: 1 Title: CVE-2020-28007 Description: Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory (owned by a non-root user), a symlink or hard link attack allows overwriting critical root-owned files anywhere on the filesystem. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2020-28007 SUSE CVE-2020-28007 openSUSE-SU-2021:0677-1 openSUSE-SU-2021:0753-1 openSUSE-SU-2021:0754-1 Platform(s): openSUSE Leap 15.2 openSUSE Tumbleweed SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Package Hub for SUSE Linux Enterprise 15 SP1 SUSE Package Hub for SUSE Linux Enterprise 15 SP2 Product(s): Definition Synopsis openSUSE Tumbleweed is installed AND Package Information exim-4.94.2-4.2 is installed OR eximon-4.94.2-4.2 is installed OR eximstats-html-4.94.2-4.2 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed AND Package Information exim-4.94.2-bp151.2.4.1 is installed OR eximon-4.94.2-bp151.2.4.1 is installed OR eximstats-html-4.94.2-bp151.2.4.1 is installed OR libspf2-2-1.2.10-bp151.4.1 is installed OR libspf2-devel-1.2.10-bp151.4.1 is installed OR libspf2-tools-1.2.10-bp151.4.1 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed AND Package Information exim-4.94.2-bp152.6.4.1 is installed OR eximon-4.94.2-bp152.6.4.1 is installed OR eximstats-html-4.94.2-bp152.6.4.1 is installed OR libspf2-2-1.2.10-bp152.5.1 is installed OR libspf2-devel-1.2.10-bp152.5.1 is installed OR libspf2-tools-1.2.10-bp152.5.1 is installed Definition Synopsis Release Information SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed AND exim-4.94.2-bp151.2.4.1 is installed OR eximon-4.94.2-bp151.2.4.1 is installed OR eximstats-html-4.94.2-bp151.2.4.1 is installed OR libspf2-2-1.2.10-bp151.4.1 is installed OR libspf2-devel-1.2.10-bp151.4.1 is installed OR libspf2-tools-1.2.10-bp151.4.1 is installed OR Package Information SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed AND exim-4.94.2-bp152.6.4.1 is installed OR eximon-4.94.2-bp152.6.4.1 is installed OR eximstats-html-4.94.2-bp152.6.4.1 is installed OR libspf2-2-1.2.10-bp152.5.1 is installed OR libspf2-devel-1.2.10-bp152.5.1 is installed OR libspf2-tools-1.2.10-bp152.5.1 is installed Definition Synopsis openSUSE Leap 15.2 is installed AND Package Information exim-4.94.2-lp152.8.3.1 is installed AND exim is signed with openSUSE key OR eximon-4.94.2-lp152.8.3.1 is installed AND eximon is signed with openSUSE key OR eximstats-html-4.94.2-lp152.8.3.1 is installed AND eximstats-html is signed with openSUSE key
BACK