high7.2Public exploit code
CVE-2013-6831
PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PineApp MailSecure - Remote Command Execution2013-11-20 · remote · linux · Verified
Impact
PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pineapp | Mail-Secure 5099sk | through - |