CVE-2008-2937

Publication date 18 August 2008

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox file even when this file is not owned by the recipient, which allows local users to read e-mail messages by creating a mailbox file corresponding to another user's account name.

Status

Package Ubuntu Release Status
postfix 8.04 LTS hardy
Not affected
7.10 gutsy
Not affected
7.04 feisty
Not affected
6.06 LTS dapper
Not affected