CVE-2007-6208: sylprint.pl in claws mail tools (claws-mail-tools) allows local users to overwrite arbitrary files via a symlink attack on the sylprint.[USER].[PID] temporary…

PriorityP49low3.6CVSS 2.0

AVLACLAuNCPIPAN

EPSS

0.36%

28.7th percentile

sylprint.pl in claws mail tools (claws-mail-tools) allows local users to overwrite arbitrary files via a symlink attack on the sylprint.[USER].[PID] temporary file.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
claws-mail	claws-mail	>= 0 < 3.1.0-2	3.1.0-2
claws-mail	claws-mail	>= 0 < 3.1.0-2	3.1.0-2
claws-mail	claws-mail	>= 0 < 3.1.0-2	3.1.0-2
claws-mail	claws-mail	>= 0 < 3.1.0-2	3.1.0-2
debian	claws-mail	< claws-mail 3.1.0-2 (bookworm)	claws-mail 3.1.0-2 (bookworm)

CVSS provenance

nvdv2.03.6LOWAV:L/AC:L/Au:N/C:P/I:P/A:N

osv3.6LOW

vendor_debian3.6LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.