CVE-2009-2939 in postfix
Summary
The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
08/23/2009
Disclosure
09/21/2009
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 50133 | postfix link following | 59 | Not defined | Not defined | CVE-2009-2939 |