Advisories:rPSA-2008-0294

From rPath Wiki

rPath Security Advisory 2008-0294-1

Published: 2008-10-16

Products

• rPath Linux 1
• rPath Linux 2

Rating

Minor

Exposure Level Classification

Local User Deterministic Privilege Escalation

Updated Versions

• postfix=conary.rpath.com@rpl:1/2.2.7-2.2-1
• postfix=conary.rpath.com@rpl:2/2.4.8-0.1-1

rPath Issue Tracking System

• RPL-2689

References

• CVE-2008-2936
• CVE-2008-2937

Description

Previous versions of the postfix package are vulnerable to a

privilege escalation attack where local users can cause mail

to be appended to existing files owned by other users.

Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html