Vulnerability in Fetchmail

CVE-2001-1378

fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files.

EPSS: 0.003 (26.8th percentile) — read the EPSS interpretation.

Affected products

Fetchmail — versions 4.5.1, 4.5.2, 4.5.3
N/a — versions n/a

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch)
cve@mitre.org (x_refsource_MISC)