EUVD-2004-1801

Malware in sbrugna...

CVE-2004-1808: Undefined Security Weakness

Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack...

Metamail symlink problem

Symlink problem in extcompose script...

Metamail 'extcompose' script Symlink Vulnerability

Product: Extcompose included with the common metamail package. http://bmrc.berkeley.edu/trey/emacs/metamail.html Versions: All Bug: Symlink bug / race condition Impact: Attacker's can write to arbitrary files, and in theory, elevate privileges Date: March 11, 2004 Author: Shaun Colley Email:...