Lucene search
SuseSUSE-SA:2008:040HistoryAug 14, 2008 - 2:39 p.m.
local privilege escalation in postfix
2008-08-1414:39:29
lists.opensuse.org
102
0.0005 Low
EPSS
Percentile
15.4%
Postfix is a well known MTA. During a source code audit the SuSE Security-Team discovered a local privilege escalation bug (CVE-2008-2936) as well as a mailbox ownership problem (CVE-2008-2937) in postfix. The first bug allowed local users to execute arbitrary commands as root while the second one allowed local users to read other users mail.
Solution
Please install the update package.
Related
openvas
openvas
Gentoo Security Advisory GLSA 200808-12 (postfix)
2008-09-24 00:00:00
SuSE Update for postfix SUSE-SA:2008:040
2009-01-23 00:00:00
SLES9: Security update for Postfix
2009-10-10 00:00:00
securityvulns
securityvulns
Postfix mail server hardlinks privilege escalation
2008-09-02 00:00:00
PoCfix (PoC for Postfix local root vuln - CVE-2008-2936)
2008-09-02 00:00:00
nessus
nessus
SuSE9 Security Update : Postfix (YOU Patch Number 12219)
2009-09-24 00:00:00
openSUSE Security Update : postfix (postfix-133)
2009-07-21 00:00:00
SuSE 10 Security Update : Postfix (ZYPP Patch Number 5500)
2008-08-14 00:00:00
gentoo
gentoo
Postfix: Local privilege escalation vulnerability
2008-08-14 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: postfix-2.5.5-1.fc9
2008-10-09 21:33:24
[SECURITY] Fedora 8 Update: postfix-2.5.5-1.fc8
2008-10-09 21:31:27
debian
debian
[SECURITY] [DSA 1629-1] New postfix packages fix privilege escalation
2008-08-18 20:51:36
veracode
veracode
Privilege Escalation
2020-04-10 00:26:37
Information Disclosure
2020-04-10 00:56:27
exploitpack
exploitpack
Postfix 2.6-20080814 - symlink Local Privilege Escalation
2008-08-31 00:00:00
prion
prion
Hardcoded credentials
2008-08-18 19:41:00
Design/Logic Flaw
2008-08-18 19:41:00
seebug
seebug
Postfix <= 2.6-20080814 - (symlink) Local Privilege Escalation Exploit
2014-07-01 00:00:00
Postfix <= 2.6-20080814 (symlink) Local Privilege Escalation Exploit
2008-08-31 00:00:00
centos
centos
postfix security update
2008-08-15 09:43:49
postfix security update
2011-04-08 12:13:18
cert
cert
Postfix local privilege escalation
2008-08-18 00:00:00
cve
cve
CVE-2008-2936
2008-08-18 19:41:00
CVE-2008-2937
2008-08-18 19:41:00
debiancve
debiancve
CVE-2008-2936
2008-08-18 19:41:00
CVE-2008-2937
2008-08-18 19:41:00
oraclelinux
oraclelinux
postfix security update
2008-08-14 00:00:00
postfix security update
2011-04-06 00:00:00
packetstorm
packetstorm
rs_pocfix.txt
2008-08-31 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package postfix version 1:2.4.8-alt1
2008-08-05 00:00:00
redhat
redhat
(RHSA-2008:0839) Moderate: postfix security update
2008-08-14 00:00:00
(RHSA-2011:0422) Moderate: postfix security update
2011-04-06 00:00:00
ubuntucve
ubuntucve
CVE-2008-2936
2008-08-18 00:00:00
CVE-2008-2937
2008-08-18 00:00:00
cvelist
cvelist
CVE-2008-2936
2008-08-18 19:00:00
CVE-2008-2937
2008-08-18 19:00:00
ubuntu
ubuntu
Postfix vulnerability
2008-08-19 00:00:00
exploitdb
exploitdb
Postfix 2.6-20080814 - 'symlink' Local Privilege Escalation
2008-08-31 00:00:00