ID de Prueba:	1.3.6.1.4.1.25623.1.0.113378
Categoría:	Privilege escalation
Título:	Dovecot < 2.2.36.3, 2.3.x < 2.3.5.1 Privilege Escalation Vulnerability
Resumen:	Dovecot is prone to a privilege escalation vulnerability.
Descripción:	Summary: Dovecot is prone to a privilege escalation vulnerability. Vulnerability Insight: A local attacker can cause a buffer overflow in the indexer-worker process. This occurs because of missing checks in the fts and pop3-uidl components. Vulnerability Impact: Successful exploitation would allow a local attacker to elevate to root. Affected Software/OS: Dovecot version 2.0.14 through 2.2.36.2 and version 2.3.0 through version 2.3.5.0. Solution: Update to version 2.2.36.3 or 2.3.5.1 respectively. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-7524 BugTraq ID: 107672 http://www.securityfocus.com/bid/107672 Bugtraq: 20190328 [SECURITY] [DSA 4418-1] dovecot security update (Google Search) https://seclists.org/bugtraq/2019/Mar/59 Debian Security Information: DSA-4418 (Google Search) https://www.debian.org/security/2019/dsa-4418 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHFZ5OWRIZGIWZJ5PTNVWWZNLLNH4XYS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4XLI55NGRDTGMVOPYFCPPFNPA5VKYSSY/ https://security.gentoo.org/glsa/201904-19 https://dovecot.org/list/dovecot-news/2019-March/000403.html https://dovecot.org/security.html https://lists.debian.org/debian-lts-announce/2019/03/msg00038.html http://www.openwall.com/lists/oss-security/2019/03/28/1 SuSE Security Announcement: openSUSE-SU-2019:1212 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00060.html SuSE Security Announcement: openSUSE-SU-2019:1220 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00067.html https://usn.ubuntu.com/3928-1/
Copyright	Copyright (C) 2019 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.