| Package | Affected versions | Patched versions |
|---|---|---|
| getmail | = 2.3.7= 3.x= 4.0= 4.0.0_b10= 4.0.1= 4.0.10= 4.0.11= 4.0.12= 4.0.13= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.0.9= 4.1= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.5 |
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free