CVE-2008-4977 Information

Description

LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks DISPUTED LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks postfix_groups.pl in Postfix 2.5.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/postfix_groups.stdout (2) /tmp/postfix_groups.stderr and (3) /tmp/postfix_groups.message temporary files. NOTE: the vendor disputes this vulnerability stating \This is not a real issue … users would have to edit a script under /usr/lib to enable it.\

Reference

http://bugs.debian.org/496401 http://dev.gentoo.org/~rbu/security/debiantemp/postfix http://www.openwall.com/lists/oss-security/2008/10/30/2 https://bugs.gentoo.org/show_bug.cgi?id=235770 https://bugs.gentoo.org/show_bug.cgi?id=235811