Main
Vulnerability Database
Exploits
ID:11548 - Exploit for UNIX Hard Link in Postfix - CVE-2008-2936
ID:11548 - Exploit for UNIX Hard Link in Postfix - CVE-2008-2936
Published: June 11, 2025
Vulnerability identifier: #VU110627
Vulnerability risk: Low
CVE-ID: CVE-2008-2936
CWE-ID: CWE-62
Exploitation vector: Local access
Vulnerable software:
Postfix
Postfix
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to an error when following hard links. A local user can append e-mail messages to a file to which a root-owned symlink points, by creating a hard link to this symlink and then send the message.
Remediation
Install updates from vendor's website.