CVE-2013-4223

MEDIUM 5.0CVE-2013-4223 · Published 23/05/2014 · updated 16/06/2026

In short

CVE-2013-4223 is a MEDIUM (CVSS 5.0) vulnerability affecting nullmailer (gentoo).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
nullmailer gentoo	`= 1.11`	No fix yet

Description

The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file.

References

osvdb.org/96177
seclists.org/oss-sec/2013/q3/337
seclists.org/oss-sec/2013/q3/339
securityfocus.com/bid/61743
bugs.gentoo.org/show_bug.cgi
exchange.xforce.ibmcloud.com/vulnerabilities/86384

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free