← Back

CVE-2004-0881

nvd nist
Published: Jan 27, 2005Modified: Apr 16, 2026

JSON object

Loading...
2.1
Vector
AV:L/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 3.9 / Impact: 2.9
Source: NVD

Description

getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.

Affected (27)

1 product
Getmail
1 product
Linux
1 product
Slackware Linux
Configuration A
23 vulnerable
Vulnerable SoftwareAffected Versions
Getmail
Version 2.3.7
Version 3.x
Version 4.0.0_b10
Version 4.0.10
Version 4.0.11
Version 4.0.12
Version 4.0.13
Version 4.0.1
Version 4.0.2
Version 4.0.3
Version 4.0.4
Version 4.0.5
Version 4.0.6
Version 4.0.7
Version 4.0.8
Version 4.0.9
Version 4.0
Version 4.1.1
Version 4.1.2
Version 4.1.3
Version 4.1.4
Version 4.1.5
Version 4.1
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Version 1.4
Slackware
Version 10.0
Version 9.1
Version current

Timeline

No history available yet.