Description
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments.
Advisories 1
- WID-SEC-2024-0521 IBM MQ: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2024
References
- basilix-webmail-view-attachments(9387) vdb-entry
- 20020619 [VulnWatch] BasiliX multiple vulnerabilities mailing-list
- 5065 vdb-entry
- 20020618 BasiliX multiple vulnerabilities mailing-list