Vulnerability Details CVE-2009-2939
The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.2%
CVSS Severity
CVSS v2 Score 6.9
References
Products affected by CVE-2009-2939
-
cpe:2.3:a:postfix:postfix:2.5.5
-
cpe:2.3:o:debian:debian_linux:6.06
-
cpe:2.3:o:ubuntu:ubuntu_linux:4.0