CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.2
CWE Name:  Permissions Privileges and Access Controls
Summary: postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system supports hard links to symlinks, allows local users to append e-mail messages to a file to which a root-owned symlink points, by creating a hard link to this symlink and then sending a message.  note: this can be leveraged to gain privileges if there is a symlink to an init script. please refer to the following links for additional version information (vendor release notes):


postfix 2.3 - ftp://mirrors.loonybin.net/pub/postfix/official/postfix-2.3.15.release_notes

postfix 2.4 - ftp://mirrors.loonybin.net/pub/postfix/official/postfix-2.4.8.release_notes

postfix 2.5 - ftp://mirrors.loonybin.net/pub/postfix/official/postfix-2.5.4.release_notes

postfix 2.6 - ftp://mirrors.loonybin.net/pub/postfix/experimental/postfix-2.6-20080814.release_notes
Access Authentication: NONE
Access Complexity: HIGH
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2008-08-18
Last Modified Date: 2018-10-11