NVD

Id
83748  
Name
CVE-2017-5899  
Description
Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary files and consequently gain root privileges via a .. (dot dot) in the randstr argument.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-04-27  
Published
2017-03-27  
Modified Date
2017-03-31  
Seq
2017-5899  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
411583 83748 CVE-2017-5502 95666  View
411584 83748 CVE-2017-5502 https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66419 JVNDB-2017-002757 S-nail の setuid root helper バイナリにおけるディレクトリトラバーサルの脆弱性 S-nail (後に S-mailx) の setuid root helper バイナリには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2017-5899 0 CVE-2017-5899 83748 6.9 7 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002757.html 2017-01-27 2017-04-27 View