Executive Summary

Summary
TitleOpenDKIM: Root privilege escalation
Informations
NameGLSA-201904-22First vendor Publication2019-04-22
VendorGentooLast vendor Modification2019-04-22
Severity (Vendor) N/ARevisionN/A

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base ScoreN/AAttack RangeN/A
Cvss Impact ScoreN/AAttack ComplexityN/A
Cvss Expoit ScoreN/AAuthenticationN/A
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

A vulnerability was discovered in Gentoo's ebuild for OpenDKIM which could lead to root privilege escalation.

Background

A community effort to develop and maintain a C library for producing DKIM-aware applications and an open source milter for providing DKIM service.

Description

It was discovered that Gentoo’s OpenDKIM ebuild does not properly set permissions or place the pid file in a safe directory.

Impact

A local attacker could escalate privileges.

Workaround

Users should ensure the proper permissions are set as discussed in the referenced bugs.

Resolution

All OpenDKIM users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-filter/opendkim-2.10.3-r8"

References

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

https://security.gentoo.org/glsa/201904-22

Original Source

Url : http://security.gentoo.org/glsa/glsa-201904-22.xml

Alert History

If you want to see full details history, please login or register.
0
DateInformations
2019-04-23 05:17:47
  • First insertion