Bug 157663

Summary:	CVE-2004-1808 metamail symlink attack
Product:	Red Hat Enterprise Linux 2.1	Reporter:	Josh Bressers <bressers>
Component:	metamail	Assignee:	Nalin Dahyabhai <nalin>
Status:	CLOSED WONTFIX	QA Contact:
Severity:	low	Docs Contact:
Priority:	medium
Version:	2.1	CC:	k.georgiou, mjc
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	impact=low,public=20040512,source=debian,reported=20050512
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-06-01 08:58:49 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2005-05-13 15:29:11 UTC

Extcompose in metamail does not verify the output file before writing to it,
which allows local users to overwrite arbitrary files via a symlink attack.

http://archives.neohapsis.com/archives/bugtraq/2004-03/0118.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=308875

Comment 1 Mark J. Cox 2009-06-01 08:58:49 UTC

Low severity, won't fix, EOL