Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-2937
HistoryAug 18, 2008 - 12:00 a.m.

CVE-2008-2937

2008-08-1800:00:00
ubuntu.com
ubuntu.com
12

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

10.1%

Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox
file even when this file is not owned by the recipient, which allows local
users to read e-mail messages by creating a mailbox file corresponding to
another user’s account name.

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

10.1%