Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BasiliX Webmail邮件附件本地泄露漏洞
Vulnerability Description
Basilix是一款基于WEB的邮件应用程序,支持邮件附件,地址簿和多语言支持。 Basilix由于对/tmp/BasiliX目录权限设置不正确,本地攻击者可以利用这个漏洞查看WEBMAIL用户发送邮件的附件信息。 Basilix把所有要发送的附件保存在/tmp/BasiliX目录中,并且全局可读,而且如果系统没有重新启动的情况下不会删除,任意本地能访问服务器的用户可以通过查看此目录获得WEBMAIL用户发送的附件信息。
CVSS Information
N/A
Vulnerability Type
N/A