Description
Chip Salzenberg Deliver does not properly associate a lockfile with the user who created the file, which allows local users to cause a denial of service (blockage of incoming e-mail) by creating lockfiles for arbitrary mailboxes.
References
- deliver-lockfile-dos(57558) vdb-entry
- 20100324 Multiple vulnerabilities in Deliver mailing-list
- 38924 vdb-entry