CVE:CVE-2004-0881
CNNVD:CNNVD-200501-292
getmail是软件开发者Charles Cazabon所研发的一套基于Linux系统的POP3邮件接收工具。
getmail 4.x中4.2.0之前版本及3.2.5之前的其他版本中存在文件覆盖漏洞。当以root身份运行时，本地用户可通过在用户子目录中创建文件链接的方式，覆盖任意文件夹。
solution:Upgrade getmail getmail to a higher version than 2.3.7,3.x,4.0,4.0.0_b10,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9,4.0.10,4.0.11,4.0.12,4.0.13,4.1,4.1.1,4.1.2,4.1.3,4.1.4,4.1.5,and avoid the version 2.3.7,3.x,4.0,4.0.0_b10,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9,4.0.10,4.0.11,4.0.12,4.0.13,4.1,4.1.1,4.1.2,4.1.3,4.1.4,4.1.5; Upgrade gentoo linux to a higher version than 1.4,and avoid the version 1.4; Upgrade slackware slackware_linux to a higher version than 9.1,10.0,current,and avoid the version 9.1,10.0,current