Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Debian Internet Message以不安全方式创建临时文件漏洞
Vulnerability Description
Debian Internet Message (IM)是Debian开发和维护的集成EMAIL，Netnews接口的系统。 Debian IM不正确建立临时文件，本地攻击者可以利用这个漏洞通过符号链接破坏用户数据或导致提升权限。 Debian IM包含的E-mail和NetNews所使用的接口命令和PERL库，在建立临时文件时不安全： 1、impwagent程序在/tmp目录下建立临时目录时使用可预测目录名，其他用户可以通过访问此临时目录，而获得用户敏感信息。 2、immknmz程序在/tmp目录下建立
CVSS Information
N/A
Vulnerability Type
N/A