CVE-2024-35179: stalwartlabs mail-server, заобикаляне на вход и права

Описание

Оригинално описание

Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, when using `RUN_AS_USER`, the specified user (and therefore, web interface admins) can read arbitrary files as root. This issue affects admins who have set up to run stalwart with `RUN_AS_USER` who handed out admin credentials to the mail server but expect these to only grant access according to the `RUN_AS_USER` and are attacked where the attackers managed to achieve Arbitrary Code Execution using another vulnerability. Version 0.8.0 contains a patch for the issue.

Засегнати продукти

• stalwartlabs mail-server: < 0.8.0

Вид слабост

• CWE-271 Грешка при отказ или понижаване на привилегии

История

Статии във FO.bg

• Как големите езикови модели могат да експлоатират Zero-Day уязвимости

Други уязвимости в stalwartlabs mail-server

• 9.1CVE-2024-35187

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-35179
• https://nvd.nist.gov/vuln/detail/CVE-2024-35179
• https://github.com/stalwartlabs/mail-server/security/advisories/GHSA-5pfx-j27j-4c6h