tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary files.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tkmail | Tkmail | 4.0_beta1 (including) | 4.0_beta1 (including) |
| Tkmail | Tkmail | 4.0_beta4 (including) | 4.0_beta4 (including) |
| Tkmail | Tkmail | 4.0_beta6 (including) | 4.0_beta6 (including) |
| Tkmail | Tkmail | 4.0_beta8 (including) | 4.0_beta8 (including) |
| Tkmail | Tkmail | 4.0_beta9 (including) | 4.0_beta9 (including) |