Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Metamail Extcompose程序符号连接漏洞
Vulnerability Description
Metamail是MIME实现的多用途邮件系统。 Metamail extcompose程序存在一个符号连接问题，本地攻击者可以利用这个漏洞覆盖和破坏系统敏感文件。 当extcompose接收用户数据，写相关输出到用户在命令行指令的文件时，脚本没有检查输出文件是否存在或文件是否是一个符号链接，就盲目的写数据到指定问中，攻击者可以利用符号链接，指向系统敏感文件，当数据写时可破坏文件内容，造成拒绝服务或权限提升。
CVSS Information
N/A
Vulnerability Type
N/A