Main Vulnerability Database Vulnerabilities #VU29118

Permissions, Privileges, and Access Controls in mailutils - CVE-2019-18862

Published: June 17, 2020

Vulnerability identifier: #VU29118

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-18862

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the maidag is installed setuid and allows local privilege escalation in the url mode.

mailutils
Gentoo Linux

Install updates from vendor's website.

mailutils - update to 3.8