Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-0881

getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.

Published

2005-01-27T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 2.1 (LOW)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application getmail getmail 2.3.7 Yes
Application getmail getmail 3.x Yes
Application getmail getmail 4.0 Yes
Application getmail getmail 4.0.0_b10 Yes
Application getmail getmail 4.0.1 Yes
Application getmail getmail 4.0.2 Yes
Application getmail getmail 4.0.3 Yes
Application getmail getmail 4.0.4 Yes
Application getmail getmail 4.0.5 Yes
Application getmail getmail 4.0.6 Yes
Application getmail getmail 4.0.7 Yes
Application getmail getmail 4.0.8 Yes
Application getmail getmail 4.0.9 Yes
Application getmail getmail 4.0.10 Yes
Application getmail getmail 4.0.11 Yes
Application getmail getmail 4.0.12 Yes
Application getmail getmail 4.0.13 Yes
Application getmail getmail 4.1 Yes
Application getmail getmail 4.1.1 Yes
Application getmail getmail 4.1.2 Yes
Application getmail getmail 4.1.3 Yes
Application getmail getmail 4.1.4 Yes
Application getmail getmail 4.1.5 Yes
Operating System gentoo linux 1.4 Yes
Operating System slackware slackware_linux 9.1 Yes
Operating System slackware slackware_linux 10.0 Yes
Operating System slackware slackware_linux current Yes
References