Vulnerability in Gentoo Linux
CVE-2004-0881
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.
EPSS: 0.004 (31.6th percentile) — read the EPSS interpretation.
Affected products
- Gentoo Linux — versions 1.4
- Getmail — versions 2.3.7, 3.x, 4.0
- Slackware Slackware_linux — versions 9.1, 10.0, current
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
- cve@mitre.org (vdb-entry, x_refsource_XF)