MasqMail Local Privilege Escalation Vulnerabilities
BID:14890
Info
MasqMail Local Privilege Escalation Vulnerabilities
| Bugtraq ID: | 14890 |
| Class: | Unknown |
| CVE: |
CVE-2005-2662 CVE-2005-2663 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 21 2005 12:00AM |
| Updated: | Jul 12 2009 05:06PM |
| Credit: | Discovery is credited to Jens Steube. |
| Vulnerable: |
MasqMail MasqMail 0.2.20 MasqMail MasqMail 0.2.18 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 |
| Not Vulnerable: | |
Discussion
MasqMail Local Privilege Escalation Vulnerabilities
MasqMail is prone to two local privilege escalation vulnerabilities.
The application is affected by a command execution vulnerability that arises due to insufficient sanitization of user-supplied data.
The application is also affected by symbolic link attacks due to a design error.
MasqMail 0.2.18 is known to be vulnerable to these issues. Other versions may be affected as well.
MasqMail is prone to two local privilege escalation vulnerabilities.
The application is affected by a command execution vulnerability that arises due to insufficient sanitization of user-supplied data.
The application is also affected by symbolic link attacks due to a design error.
MasqMail 0.2.18 is known to be vulnerable to these issues. Other versions may be affected as well.
Exploit / POC
MasqMail Local Privilege Escalation Vulnerabilities
An exploit is not required.
An exploit is not required.
Solution / Fix
MasqMail Local Privilege Escalation Vulnerabilities
Solution:
Mandriva has released advisory MDKSA-2005:168 to address these issues. Please see the referenced advisory for more information.
Debian GNU/Linux has released advisory DSA 848-1, along with fixes to address these issues. Please see the referenced advisory for further information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
MasqMail MasqMail 0.2.18
MasqMail MasqMail 0.2.20
Solution:
Mandriva has released advisory MDKSA-2005:168 to address these issues. Please see the referenced advisory for more information.
Debian GNU/Linux has released advisory DSA 848-1, along with fixes to address these issues. Please see the referenced advisory for further information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
MasqMail MasqMail 0.2.18
-
Mandriva masqmail-0.2.18-3.1.M20mdk.i586.rpm
Multi Network Firewall 2.0
http://www1.mandrivalinux.com/en/ftp.php3
MasqMail MasqMail 0.2.20
-
Debian masqmail_0.2.20-1sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/masqmail/masqmail_0.2.2 0-1sarge1_alpha.deb -
Debian masqmail_0.2.20-1sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/masqmail/masqmail_0.2.2 0-1sarge1_arm.deb -
Debian masqmail_0.2.20-1sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/masqmail/masqmail_0.2.2 0-1sarge1_hppa.deb -
Debian masqmail_0.2.20-1sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/masqmail/masqmail_0.2.2 0-1sarge1_i386.deb -
Debian masqmail_0.2.20-1sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/masqmail/masqmail_0.2.2 0-1sarge1_ia64.deb -
Debian masqmail_0.2.20-1sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/masqmail/masqmail_0.2.2 0-1sarge1_m68k.deb -
Debian masqmail_0.2.20-1sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/masqmail/masqmail_0.2.2 0-1sarge1_mips.deb -
Debian masqmail_0.2.20-1sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/masqmail/masqmail_0.2.2 0-1sarge1_mipsel.deb -
Debian masqmail_0.2.20-1sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/masqmail/masqmail_0.2.2 0-1sarge1_powerpc.deb -
Debian masqmail_0.2.20-1sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/masqmail/masqmail_0.2.2 0-1sarge1_s390.deb -
Debian masqmail_0.2.20-1sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/masqmail/masqmail_0.2.2 0-1sarge1_sparc.deb