DSPAM Insecure Default Permissions Privilege Escalation Vulnerability
BID:8623
Info
DSPAM Insecure Default Permissions Privilege Escalation Vulnerability
| Bugtraq ID: | 8623 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 15 2003 12:00AM |
| Updated: | Sep 15 2003 12:00AM |
| Credit: | The discovery of this vulnerability has been credited to Jonathan A. Zdziarski <[email protected]>. |
| Vulnerable: |
DSPAM DSPAM 2.6.5 .1 DSPAM DSPAM 2.6.5 |
| Not Vulnerable: |
DSPAM DSPAM 2.6.5 .2 |
Discussion
DSPAM Insecure Default Permissions Privilege Escalation Vulnerability
A vulnerability has been reported for DSPAM that may allow an attacker to execute arbitrary code with elevated privileges. The issue lies in the fact that DSPAM is installed world-executable and setgid by default.
The DSPAM application allows a user to specify various agents via the command-line. As a result, an unprivileged attacker may be capable of specifying a malicious executable to the application. When invoked, the executable will be run with the group privileges of DSPAM.
This privilege escalation could assist in further attacks launched against a target system.
A vulnerability has been reported for DSPAM that may allow an attacker to execute arbitrary code with elevated privileges. The issue lies in the fact that DSPAM is installed world-executable and setgid by default.
The DSPAM application allows a user to specify various agents via the command-line. As a result, an unprivileged attacker may be capable of specifying a malicious executable to the application. When invoked, the executable will be run with the group privileges of DSPAM.
This privilege escalation could assist in further attacks launched against a target system.
Exploit / POC
DSPAM Insecure Default Permissions Privilege Escalation Vulnerability
No exploit required.
No exploit required.
Solution / Fix
DSPAM Insecure Default Permissions Privilege Escalation Vulnerability
Solution:
It has been reported that this issue was addressed in DSPAM 2.6.5.2.
DSPAM DSPAM 2.6.5
DSPAM DSPAM 2.6.5 .1
Solution:
It has been reported that this issue was addressed in DSPAM 2.6.5.2.
DSPAM DSPAM 2.6.5
-
DSPAM dspam-2.6.5.2.tar.gz
http://freshmeat.net/redir/dspam/39132/url_tgz/dspam-2.6.5.2.tar.gz
DSPAM DSPAM 2.6.5 .1
-
DSPAM dspam-2.6.5.2.tar.gz
http://freshmeat.net/redir/dspam/39132/url_tgz/dspam-2.6.5.2.tar.gz