Vulnerability Details CVE-2013-4223
The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://osvdb.org/96177
- http://seclists.org/oss-sec/2013/q3/337
- http://seclists.org/oss-sec/2013/q3/339
- http://www.securityfocus.com/bid/61743
- https://bugs.gentoo.org/show_bug.cgi?id=480376
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86384
- http://osvdb.org/96177
- http://seclists.org/oss-sec/2013/q3/337
- http://seclists.org/oss-sec/2013/q3/339
- http://www.securityfocus.com/bid/61743
- https://bugs.gentoo.org/show_bug.cgi?id=480376
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86384
Products affected by CVE-2013-4223
-
cpe:2.3:a:gentoo:nullmailer:1.11