Description
Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp/mailmgr.tmp, or (3) /tmp/mailmgr.sort.
References
- 9654 vdb-entry
- mailmgr-insecure-temp-directory(15203) vdb-entry
- 20040212 Symlink vulnerabilities in mailmgr mailing-list