Oval Definition:	oval:org.opensuse.security:def:202028008
Revision Date: 2022-06-30 Version: 1 Title: CVE-2020-28008 Description: Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory (owned by a non-root user), an attacker can write to a /var/spool/exim4/input spool header file, in which a crafted recipient address can indirectly lead to command execution. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2020-28008 SUSE CVE-2020-28008 openSUSE-SU-2021:0677-1 openSUSE-SU-2021:0753-1 openSUSE-SU-2021:0754-1 Platform(s): openSUSE Leap 15.2 openSUSE Tumbleweed SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Package Hub for SUSE Linux Enterprise 15 SP1 SUSE Package Hub for SUSE Linux Enterprise 15 SP2 Product(s): Definition Synopsis openSUSE Tumbleweed is installed AND Package Information exim-4.94.2-4.2 is installed OR eximon-4.94.2-4.2 is installed OR eximstats-html-4.94.2-4.2 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed AND Package Information exim-4.94.2-bp151.2.4.1 is installed OR eximon-4.94.2-bp151.2.4.1 is installed OR eximstats-html-4.94.2-bp151.2.4.1 is installed OR libspf2-2-1.2.10-bp151.4.1 is installed OR libspf2-devel-1.2.10-bp151.4.1 is installed OR libspf2-tools-1.2.10-bp151.4.1 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed AND Package Information exim-4.94.2-bp152.6.4.1 is installed OR eximon-4.94.2-bp152.6.4.1 is installed OR eximstats-html-4.94.2-bp152.6.4.1 is installed OR libspf2-2-1.2.10-bp152.5.1 is installed OR libspf2-devel-1.2.10-bp152.5.1 is installed OR libspf2-tools-1.2.10-bp152.5.1 is installed Definition Synopsis Release Information SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed AND exim-4.94.2-bp151.2.4.1 is installed OR eximon-4.94.2-bp151.2.4.1 is installed OR eximstats-html-4.94.2-bp151.2.4.1 is installed OR libspf2-2-1.2.10-bp151.4.1 is installed OR libspf2-devel-1.2.10-bp151.4.1 is installed OR libspf2-tools-1.2.10-bp151.4.1 is installed OR Package Information SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed AND exim-4.94.2-bp152.6.4.1 is installed OR eximon-4.94.2-bp152.6.4.1 is installed OR eximstats-html-4.94.2-bp152.6.4.1 is installed OR libspf2-2-1.2.10-bp152.5.1 is installed OR libspf2-devel-1.2.10-bp152.5.1 is installed OR libspf2-tools-1.2.10-bp152.5.1 is installed Definition Synopsis openSUSE Leap 15.2 is installed AND Package Information exim-4.94.2-lp152.8.3.1 is installed AND exim is signed with openSUSE key OR eximon-4.94.2-lp152.8.3.1 is installed AND eximon is signed with openSUSE key OR eximstats-html-4.94.2-lp152.8.3.1 is installed AND eximstats-html is signed with openSUSE key
BACK