CVE-2020-26880
07.10.2020, 18:15
Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifying the sympa.conf configuration file (which is owned by sympa) and parsing it through the setuid sympa_newaliases-wrapper executable.Enginsight
| Vendor | Product | Version |
|---|---|---|
| sympa | sympa | 𝑥 ≤ 6.2.56 |
| sympa | sympa | 6.2.57:beta1 |
| sympa | sympa | 6.2.57:beta2 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References