CVE-2017-5930

BAJO 2.7CVE-2017-5930 · Published 20/03/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
postfixadmin postfixadmin_project	`< 3.0.2`	`3.0.2`

Description

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check.

References

lists.opensuse.org/opensuse-updates/2017-02/msg00076.html · Third Party Advisory
openwall.com/lists/oss-security/2017/02/08/1 · Mailing List
openwall.com/lists/oss-security/2017/02/09/1 · Mailing List
securityfocus.com/bid/96142 · Third Party Advisory
postfixadmin/postfixadmin · Release Notes
postfixadmin/postfixadmin#23 · Patch
sourceforge.net/p/postfixadmin/mailman/message/35646827 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free