NVD

Id
2831  
Name
CVE-2008-2937  
Description
Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox file even when this file is not owned by the recipient, which allows local users to read e-mail messages by creating a mailbox file corresponding to another user"s account name.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-08-18  
Modified Date
2016-12-07  
Seq
2008-2937  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17929 2831 CVE-2008-2937 ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-2.6-20080814.HISTORY  View
17930 2831 CVE-2008-2937 ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-2.5.4.HISTORY  View
17931 2831 CVE-2008-2937 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
17932 2831 CVE-2008-2937 SUSE-SA:2008:040  View
17933 2831 CVE-2008-2937 GLSA-200808-12  View
17934 2831 CVE-2008-2937 http://wiki.rpath.com/Advisories:rPSA-2008-0259  View
17935 2831 CVE-2008-2937 MDVSA-2009:224  View
17936 2831 CVE-2008-2937 RHSA-2011:0422  View
17937 2831 CVE-2008-2937 20080821 rPSA-2008-0259-1 postfix  View
17938 2831 CVE-2008-2937 30691  View
17939 2831 CVE-2008-2937 ADV-2008-2385  View
17940 2831 CVE-2008-2937 postfix-email-information-disclosure(44461)  View
17941 2831 CVE-2008-2937 https://issues.rpath.com/browse/RPL-2689  View
17942 2831 CVE-2008-2937 FEDORA-2008-8595  View
17943 2831 CVE-2008-2937 FEDORA-2008-8593  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46340 JVNDB-2008-001650 Postfix における e-mail メッセージが漏えいする脆弱性 Postfix には、メールボックスファイルの所有者を検証しないため、e-mail メッセージを読みとられる脆弱性が存在します。 CVE-2008-2937 33050 CVE-2008-2937 2831 1.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001650.html 2008-08-18 2011-04-26 View