NVD

Id
2830  
Name
CVE-2008-2936  
Description
Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system supports hard links to symlinks, allows local users to append e-mail messages to a file to which a root-owned symlink points, by creating a hard link to this symlink and then sending a message. NOTE: this can be leveraged to gain privileges if there is a symlink to an init script.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-08-18  
Modified Date
2011-03-07  
Seq
2008-2936  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17903 2830 CVE-2008-2936 ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-2.6-20080814.HISTORY  View
17904 2830 CVE-2008-2936 ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.3.15.HISTORY  View
17905 2830 CVE-2008-2936 ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.4.8.HISTORY  View
17906 2830 CVE-2008-2936 ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.5.4.HISTORY  View
17907 2830 CVE-2008-2936 [postfix-announce] 20080814 Postfix local privilege escalation via hardlinked symlinks  View
17908 2830 CVE-2008-2936 SUSE-SA:2008:040  View
17909 2830 CVE-2008-2936 oval:org.mitre.oval:def:10033  View
17910 2830 CVE-2008-2936 GLSA-200808-12  View
17911 2830 CVE-2008-2936 4160  View
17912 2830 CVE-2008-2936 http://wiki.rpath.com/Advisories:rPSA-2008-0259  View
17913 2830 CVE-2008-2936 DSA-1629  View
17914 2830 CVE-2008-2936 VU#938323  View
17915 2830 CVE-2008-2936 MDVSA-2008:171  View
17916 2830 CVE-2008-2936 6337  View
17917 2830 CVE-2008-2936 RHSA-2008:0839  View
17918 2830 CVE-2008-2936 20080814 Postfix local privilege escalation via hardlinked symlinks  View
17919 2830 CVE-2008-2936 20080821 rPSA-2008-0259-1 postfix  View
17920 2830 CVE-2008-2936 20080831 PoCfix (PoC for Postfix local root vuln - CVE-2008-2936)  View
17921 2830 CVE-2008-2936 30691  View
17922 2830 CVE-2008-2936 1020700  View
17923 2830 CVE-2008-2936 USN-636-1  View
17924 2830 CVE-2008-2936 ADV-2008-2385  View
17925 2830 CVE-2008-2936 postfix-symlink-code-execution(44460)  View
17926 2830 CVE-2008-2936 https://issues.rpath.com/browse/RPL-2689  View
17927 2830 CVE-2008-2936 FEDORA-2008-8595  View
17928 2830 CVE-2008-2936 FEDORA-2008-8593  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46339 JVNDB-2008-001649 Postfix における権限昇格の脆弱性 Postfix には権限昇格の脆弱性が存在します。結果として、ローカルユーザが任意のファイルを書き換える可能性があります。 CVE-2008-2936 33049 CVE-2008-2936 2830 6.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001649.html 2008-08-19 2008-10-27 View