PT-2004-1921 · Getmail · Getmail

David Watson · Publicado 2004-09-24 · Atualizado 2017-07-11 · CVE-2004-0880

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: getmail versions 4.0 through 4.2.0

Description: The issue allows local users to overwrite arbitrary files via a symlink attack on an mbox file when getmail is run as root.

Recommendations: For getmail versions 4.0 through 4.1.x, update to version 4.2.0 or later to resolve the issue. For getmail version 4.2.0 before the fix, update to the fixed version to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0880

DSA-553-1

Produtos afetados

Getmail

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/17437 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0880 · Nota de Segurança
• http://qcc.ca/~charlesc/software/getmail-4/CHANGELOG · Nota
• http://debian.org/security/2004/dsa-553 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=109571883130372&w=2 · Nota
• http://security.gentoo.org/glsa/glsa-200409-32.xml · Aviso do Fabricante