https://bugs.exim.org/show_bug.cgi?id=2141

            Bug ID: 2141
           Summary: Hints db access should define a db environment
           Product: Exim
           Version: 4.88
          Hardware: x86
                OS: Linux
            Status: NEW
          Severity: bug
          Priority: medium
         Component: Queues
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected]

Apparently Berkeley DB looks for a DB_CONFIG file in cwd for an "environment"
definition; this could be used to point to an alternate DB file location so
corrupting an unexpected file, which has security implications.

We should create a known environment for BDB before opening the db, to avoid
this.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim 
details at http://www.exim.org/ ##

Reply via email to