CVE-2004-0881
NONE EPSS 31.2%
Published Jan 27, 200521y ago · Modified Jun 16, 20262w ago
Published Jan 27, 2005 21y ago
Last Modified Jun 16, 2026 2w ago
Description
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.
Threat Intelligence
EPSS Exploit Probability
31.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Affected Products 27
| Vendor | Product | Version | Range |
|---|---|---|---|
| getmail | getmail | 2.3.7 | any |
| getmail | getmail | 3.x | any |
| getmail | getmail | 4.0 | any |
| getmail | getmail | 4.0.0_b10 | any |
| getmail | getmail | 4.0.1 | any |
| getmail | getmail | 4.0.2 | any |
| getmail | getmail | 4.0.3 | any |
| getmail | getmail | 4.0.4 | any |
| getmail | getmail | 4.0.5 | any |
| getmail | getmail | 4.0.6 | any |
| getmail | getmail | 4.0.7 | any |
| getmail | getmail | 4.0.8 | any |
| getmail | getmail | 4.0.9 | any |
| getmail | getmail | 4.0.10 | any |
| getmail | getmail | 4.0.11 | any |
| getmail | getmail | 4.0.12 | any |
| getmail | getmail | 4.0.13 | any |
| getmail | getmail | 4.1 | any |
| getmail | getmail | 4.1.1 | any |
| getmail | getmail | 4.1.2 | any |
| getmail | getmail | 4.1.3 | any |
| getmail | getmail | 4.1.4 | any |
| getmail | getmail | 4.1.5 | any |
| gentoo | linux | 1.4 | any |
| slackware | slackware_linux | 9.1 | any |
| slackware | slackware_linux | 10.0 | any |
| slackware | slackware_linux | current | any |
References 5
- marc.info http://marc.info/?l=bugtraq&m=109571883130372&w=2
- security.gentoo.org http://security.gentoo.org/glsa/glsa-200409-32.xml
- debian.org http://www.debian.org/security/2004/dsa-553
- qcc.ca http://www.qcc.ca/~charlesc/software/getmail-4/CHANGELOG
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/17439
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.