Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.0
CVE-2017-5899: S-nail lets local users gain root access
CVE-2017-5899 · published 9 years ago
Summary
The S-nail email program (versions before 14.8.16) includes a helper that runs with full system privileges. A flaw lets any user on the machine create or modify any file, which can be used to take control of the system as the administrator. Update S-nail to the latest version or apply the vendor's security patch to stop this from happening.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| s-nail_project | s-nail |
<= 14.8.5 cpe:2.3:a:s-nail_project:s-nail:*:*:*:*:*:*:*:* |
Original advisory text
Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary files and consequently gain root privileges via ...
Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary files and consequently gain root privileges via a .. (dot dot) in the randstr argument.
References
- http://www.openwall.com/lists/oss-security/2017/01/27/7 Exploit Mailing List Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/02/07/4 Mailing List Third Party Advisory
- http://www.securityfocus.com/bid/96138 Third Party Advisory VDB Entry
- https://www.mail-archive.com/s-nail-users%40lists.sourceforge.net/msg00551.html
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-22Path Traversal
CWE-362Race Condition
Timeline
Published27 Mar 2017
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-5899 · NVD
Track software like this
Free during beta