CVE-2017-5899

Severity: high (CVSS 7.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-03-27 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary files and consequently gain root privileges via a .. (dot dot) in the randstr argument.

Affected products

S-Nail Project S-Nail: through 14.8.5

References

http://www.openwall.com/lists/oss-security/2017/01/27/7
http://www.openwall.com/lists/oss-security/2017/02/07/4
http://www.securityfocus.com/bid/96138
https://www.mail-archive.com/s-nail-users%40lists.sourceforge.net/msg00551.html
http://www.openwall.com/lists/oss-security/2017/01/27/7
http://www.openwall.com/lists/oss-security/2017/02/07/4
http://www.securityfocus.com/bid/96138
https://www.mail-archive.com/s-nail-users%40lists.sourceforge.net/msg00551.html

Get alerted when CVE-2017-5899 or the next vulnerability affects your stack