onyx --cves cve-2008-2937
CVE-2008-2937
- score
- <0.1
- cvss
- 1.9
- epss
- 0.4%
- published
- 2008-08-18
- kev added
- —
- first seen
Postfix before 2.5.4 and 2.6-20080814 contain a local privilege escalation caused by delivering to mailbox files not owned by the recipient, letting local users read others' emails, exploit requires local user access.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 19
- http://secunia.com/advisories/31485
- http://wiki.rpath.com/Advisories:rPSA-2008-0259
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:224
- http://www.vupen.com/english/advisories/2008/2385
- https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00271.html
- http://secunia.com/advisories/31500
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00002.html
- http://security.gentoo.org/glsa/glsa-200808-12.xml
- http://www.securityfocus.com/archive/1/495632/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44461
- ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.5.4.HISTORY
- http://secunia.com/advisories/31477
- http://secunia.com/advisories/32231
- http://www.redhat.com/support/errata/RHSA-2011-0422.html
- https://issues.rpath.com/browse/RPL-2689
- http://www.securityfocus.com/bid/30691
- ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-2.6-20080814.HISTORY
- https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00287.html