EUVD-2017-7843

Malware in sbrugna...

CVE-2017-16659

The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script...

CVE-2017-16659

The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script...

Code injection

The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script...

CVE-2017-16659

CVE-2017-16659 involves the Gentoo mail-filter/assp package (versions ≤ 1.9.8.13030). A local attacker who can access the assp user account can escalate privileges by installing a Trojan horse at /usr/share/assp/assp.pl, under the assp context. Connected documents also confirm this as a local-pri...

CVE-2017-16659

The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script...

PT-2017-14507

Name of the Vulnerable Software and Affected Versions mail-filter/assp versions 1.9.8.13030 and earlier Description The issue allows local users to gain privileges by leveraging access to the assp user account. This can be achieved by installing a Trojan horse /usr/share/assp/assp.pl script...

Gentoo mail-filter/assp package elevation of privilege vulnerability

The Gentoo mail-filter/assp package is an anti-spam package from the Gentoo Foundation. A security vulnerability exists in the Gentoo mail-filter/assp package version 1.9.8.13030 and earlier. A local attacker can exploit this vulnerability to gain privileges...

CVE-2017-16659: Incorrect Permission Assignment for Critical Resource

The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script...

CVE-2007-4296

Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server ASSP 1.3.3 has unknown impact and attack vectors...

CVE-2007-4296

Technical details (affected software/component, root cause, impact or fix) are not publicly provided in the provided documents. Monitor for updates; current sources describe an unspecified vulnerability in assp.pl for Anti-Spam SMTP Proxy Server 1.3.3 with unknown impact.

CVE-2007-4296: Undefined Security Weakness

Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server ASSP 1.3.3 has unknown impact and attack vectors...

assp.txt

Anti-Spam SMTP Proxy ASSP "get?file" Traversal Vulnerability Release Date: August 15, 2006 Notice: This is a known flaw, and has been since the implementation of an enhanced web interface for ASSP, since at least 2003. I do not normally test for security vulnerabilities or address them directly,...

CVE-2006-4258

CVE-2006-4258 affects Anti-Spam SMTP Proxy (ASSP). The vulnerability is an absolute path traversal in the get functionality, allowing remote authenticated users to read arbitrary files via file parameter values such as C:\ or UNC paths. Documents confirm the affected component and the underlying ...

CVE-2006-4258: Undefined Security Weakness

Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy ASSP allows remote authenticated users to read arbitrary files via 1 C:\ Windows drive letter, 2 UNC, and possibly other types of paths in the file parameter...