CVE-2004-0880: Gentoo Linux

Low severity, CVSS 1.2. EPSS: 0.3% chance of exploitation in the next 30 days.

getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.

Affected products

• Gentoo Linux: version 1.4 only
• Getmail Getmail: version 2.3.7 only; version 3.x only; version 4.0 only; version 4.0.0_b10 only; version 4.0.1 only; version 4.0.2 only; …
• Slackware Slackware Linux: version 9.1 only; version 10.0 only; version current only

Published 2005-01-27. Last modified 2026-06-16.