mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 10:41:43 +00:00
18 lines
748 B
Markdown
18 lines
748 B
Markdown
|
### [CVE-2017-10140](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10140)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- https://www.oracle.com/security-alerts/cpujul2020.html
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/yfoelling/yair
|
||
|
|
|