| Package | Affected versions | Patched versions |
|---|---|---|
| metamail | = 2.7 |
Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free