Main Vulnerability Database Vulnerabilities #VU29118

Permissions, Privileges, and Access Controls in mailutils - CVE-2019-18862

Published: June 17, 2020

Vulnerability identifier: #VU29118

CSH Severity: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2019-18862

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
mailutils

Software vendor:
mailutils.org

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the maidag is installed setuid and allows local privilege escalation in the url mode.

Install updates from vendor's website.