Description
Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | im | 1:141-20 | — |
| Debian 13 | im | 1:141-20 | — |
| Debian 12 | im | 1:141-20 | — |
| Debian 3.0 | im | 141-18.1 | DSA-202 |
Advisories 1
- DSA-202 im - insecure temporary files Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-202 vendor-advisory
- im-impwagent-insecure-directory(10766) vdb-entry
- 6307 vdb-entry
- 8242 third-party-advisory
- 8166 third-party-advisory
- im-immknmz-symlink(10767) vdb-entry
- RHSA-2003:039 vendor-advisory