CVE-2004-0880: getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file

Unscored severity · published Jan 27, 2005

CVE-2004-0880

getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file

–

CVSS

0.3%

EPSS

On KEV

Description

getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 23% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

2.3.7; 3.x; 4.0; 4.0.0_b10; 4.0.1; 4.0.2; +17 more · source: NVD

1.4 · source: NVD

9.1; 10.0; current · source: NVD

Affected product

Linux

Gentoo

References