Skip to main content

Nullmailer

1 CVEs product

Monthly

CVE-2013-4223 May 23, 14:55 MEDIUM This Month

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Nullmailer Gentoo
NVD
CVSS 2.0
5.0
EPSS
0.4%
EPSS 0% CVSS 5.0
MEDIUM This Month

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Nullmailer Gentoo
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy