vulnerability
Ubuntu: USN-4820-1 (CVE-2017-5899): S-nail vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:N/C:C/I:C/A:C) | Mar 27, 2017 | Mar 22, 2023 | Mar 27, 2026 |
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Mar 27, 2017
Added
Mar 22, 2023
Modified
Mar 27, 2026
Description
Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary files and consequently gain root privileges via a .. (dot dot) in the randstr argument.
Solutions
ubuntu-pro-upgrade-heirloom-mailxubuntu-pro-upgrade-s-nail
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.