CVE-2008-4977

Affected software: Postfix 2.5.2. Vulnerability: postfix_groups.pl allows local users to overwrite arbitrary files via a symlink attack on temporary files (/tmp/postfix_groups.stdout, /tmp/postfix_groups.stderr, /tmp/postfix_groups.message). The issue is dependent on a symlink/temporary-file race...