Undocumented Functionality in Berkeley DB Allows Privilege Escalation in Postfix

CVE-2017-10140 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.

Learn more about our User Device Pen Test.