The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | semi | < 1.14.5+20030609-1 | semi_1.14.5+20030609-1_all.deb |
Debian | 11 | all | semi | < 1.14.5+20030609-1 | semi_1.14.5+20030609-1_all.deb |
Debian | 10 | all | semi | < 1.14.5+20030609-1 | semi_1.14.5+20030609-1_all.deb |
Debian | 999 | all | semi | < 1.14.5+20030609-1 | semi_1.14.5+20030609-1_all.deb |
Debian | 13 | all | semi | < 1.14.5+20030609-1 | semi_1.14.5+20030609-1_all.deb |