CVE

Id
102719  
CVE No.
CVE-2017-5899  
Status
Candidate  
Description
Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary files and consequently gain root privileges via a .. (dot dot) in the randstr argument.  
Phase
Assigned (20170207)  
Votes
None (candidate not yet proposed)  
Comments