NetSight
IP …
high7.8

CVE-2017-10140

Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented f…

Impact

Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.

Affected products

VendorProductAffected versions
PostfixPostfix
before 2.11.10
from 3.0.0 before 3.0.10
from 3.1.0 before 3.1.6
from 3.2.0 before 3.2.2

References