BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/9387 | vdb entry |
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html | mailing list |
http://www.securityfocus.com/bid/5065 | vdb entry |
http://online.securityfocus.com/archive/1/277710 | mailing list |