The Debian Hack Shop

Sebastian Krahmer discovered that Postfix, a mail transfer agent,
incorrectly checks the ownership of a mailbox. In some configurations,
this allows for appending data to arbitrary files as root.

Read the full story: DSA-1629 postfix - programming error: http://www.debian.org/security/2008/dsa-1629

Tags: Debian, DSA, Security

This entry was posted on Tuesday, August 19th, 2008 at 2:19 am and is filed under Debian Security. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.