Fluid Attacks Database

Description

sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-*.#####.log temporary file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version
debian 14	maildirsync	=1.2-4 \|\| =1.2-5
debian 11	maildirsync	=1.2-3 \|\| =1.2-4 \|\| =1.2-5
debian 12	maildirsync	=1.2-4 \|\| =1.2-5
debian 13	maildirsync	=1.2-4 \|\| =1.2-5

Aliases

1. CVE-2008-51502. NVD-2008-51503. OSV-DEBIAN-2008-51504. OSV-2008-51505. SECURITY-TRACKER-CVE-2008-5150

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.