CVE Vulnerabilities

CVE-2004-0881

Published: Jan 27, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.

Affected Software

Name Vendor Start Version End Version
Getmail Getmail 2.3.7 2.3.7
Getmail Getmail 3.x 3.x
Getmail Getmail 4.0 4.0
Getmail Getmail 4.0.0_b10 4.0.0_b10
Getmail Getmail 4.0.1 4.0.1
Getmail Getmail 4.0.2 4.0.2
Getmail Getmail 4.0.3 4.0.3
Getmail Getmail 4.0.4 4.0.4
Getmail Getmail 4.0.5 4.0.5
Getmail Getmail 4.0.6 4.0.6
Getmail Getmail 4.0.7 4.0.7
Getmail Getmail 4.0.8 4.0.8
Getmail Getmail 4.0.9 4.0.9
Getmail Getmail 4.0.10 4.0.10
Getmail Getmail 4.0.11 4.0.11
Getmail Getmail 4.0.12 4.0.12
Getmail Getmail 4.0.13 4.0.13
Getmail Getmail 4.1 4.1
Getmail Getmail 4.1.1 4.1.1
Getmail Getmail 4.1.2 4.1.2
Getmail Getmail 4.1.3 4.1.3
Getmail Getmail 4.1.4 4.1.4
Getmail Getmail 4.1.5 4.1.5

References