CVE-2004-0881: Gentoo Linux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.

Affected products

• Gentoo Linux: version 1.4 only
• Getmail Getmail: version 2.3.7 only; version 3.x only; version 4.0 only; version 4.0.0_b10 only; version 4.0.1 only; version 4.0.2 only; …
• Slackware Slackware Linux: version 9.1 only; version 10.0 only; version current only

Published 2005-01-27. Last modified 2026-06-16.