Skip to content
OpenAdvisories
Unscored DSA-553-1 2 CVEs

getmail - symlink vulnerability

Published Sep 27, 2004 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 getmail 2.3.7-2

Vulnerabilities 2

  • Unscored —

    getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an …

  • Unscored —

    getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbit…