CVE search · CVE-2013-4223
CVE-2013-4223
medium 5.0
The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file.
Details
- Status
- Modified
- Published
- Last changed
- Source
- secalert@redhat.com
- Weakness
- CWE-264
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 2.0 | medium 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- gentoo · nullmailer
References
- http://osvdb.org/96177
- http://seclists.org/oss-sec/2013/q3/337
- http://seclists.org/oss-sec/2013/q3/339
- http://www.securityfocus.com/bid/61743
- https://bugs.gentoo.org/show_bug.cgi?id=480376
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86384
- http://osvdb.org/96177
- http://seclists.org/oss-sec/2013/q3/337
- http://seclists.org/oss-sec/2013/q3/339
- http://www.securityfocus.com/bid/61743
- https://bugs.gentoo.org/show_bug.cgi?id=480376
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86384