| Package | Affected versions | Patched versions |
|---|---|---|
| postfix | = 2.5.5 |
The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free