Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp/mailmgr.tmp, or (3) /tmp/mailmgr.sort.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mailmgr以不安全方式创建临时文件漏洞
Vulnerability Description
Mailmgr是一款Sendmail分析报告生成器，用于建立HTML报告。 Mailmgr不安全建立临时文件，本地攻击者可以利用这个漏洞破坏系统文件或提升权限。 默认情况下mailmgr使用可预测临时文件生成在/tmp目录下，攻击者可以建立符号链接，在用户运行mailmgr生成邮件报告时覆盖系统任意文件，可造成拒绝服务或权限提升。 临时文件名一般为： /tmp/mailmgr.unsort /tmp/mailmgr.tmp /tmp/mailmgr.sort
CVSS Information
N/A
Vulnerability Type
N/A