Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Internet_message | Debian | 133-0 (including) | 133-0 (including) |
Internet_message | Debian | 141-0 (including) | 141-0 (including) |