Vulnerability in Gentoo Linux

CVE-2004-0880

getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.

EPSS: 0.003 (22.7th percentile) — read the EPSS interpretation.

Affected products

Gentoo Linux — versions 1.4
Getmail — versions 2.3.7, 3.x, 4.0
Slackware Slackware_linux — versions 9.1, 10.0, current
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
cve@mitre.org (vdb-entry, x_refsource_XF)