CVE-2008-5150

2008-11-1800:00:00

ubuntu.com

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

Percentile

5.1%

JSON

sample.sh in maildirsync 1.1 allows local users to append data to arbitrary
files via a symlink attack on a /tmp/maildirsync-*.#####.log temporary
file.

Notes

Author	Note
jdstrand	per Debian, unsafe code is in example script

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchmaildirsync< anyUNKNOWN
ubuntu20.04noarchmaildirsync< anyUNKNOWN
ubuntu22.04noarchmaildirsync< anyUNKNOWN
ubuntu24.04noarchmaildirsync< anyUNKNOWN
ubuntu16.04noarchmaildirsync< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	maildirsync	< any	UNKNOWN
ubuntu	20.04	noarch	maildirsync	< any	UNKNOWN
ubuntu	22.04	noarch	maildirsync	< any	UNKNOWN
ubuntu	24.04	noarch	maildirsync	< any	UNKNOWN
ubuntu	16.04	noarch	maildirsync	< any	UNKNOWN