Published: 11/11/2019 Updated: 24/08/2020

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 465

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

maidag in GNU Mailutils prior to 3.8 is installed setuid and allows local privilege escalation in the url mode.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu mailutils

Debian Bug report logs - #944265 mailutils: local privilege escalation in maidag utility (fixed in 38) (CVE-2019-18862) Package: src:mailutils; Maintainer for src:mailutils is Jordi Mallach <jordi@debianorg>; Reported by: Paul Wise <pabs@debianorg> Date: Thu, 7 Nov 2019 00:00:02 UTC Severity: serious Tags: fixed- ...

# Exploit Title: GNU Mailutils 37 - Local Privilege Escalation # Date: 2019-11-06 # Exploit Author: Mike Gualtieri # Vendor Homepage: mailutilsorg/ # Software Link: ftpgnuorg/gnu/mailutils/mailutils-37targz # Version: 20 <= 37 # Tested on: Gentoo # CVE : CVE-2019-18862 Title : GNU Mailutils / Maidag Local Privilege Es ...

GNU Mailutils versions 20 through 37 suffer from a local privilege escalation vulnerability ...

NVD-CWE-noinfo https://git.savannah.gnu.org/cgit/mailutils.git/tree/NEWS http://packetstormsecurity.com/files/155425/GNU-Mailutils-3.7-Privilege-Escalation.html https://security.gentoo.org/glsa/202006-12 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=944265 https://nvd.nist.gov https://www.exploit-db.com/exploits/47703

CVE-2019-18862

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect