Privilege Escalation Vulnerability in Gentoo mail-filter/assp Package

CVE-2017-16659 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script.

Learn more about our Cis Benchmark Audit For Debian Family Linux.