Every CVE Search/ Get API key

CVE-2005-2663

masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a...

2.1 Low

masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.

Exploit likelihood

0.36%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.

Record
CVE-2005-2663
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.

Record
CVE-2005-2663
Updated
2026-11-02
EUVDEUVD-2005-2664 No score

masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.

Record
EUVD-2005-2664
Updated
2026-11-03
GitHub AdvisoriesGHSA-22g9-8497-wf8p No score

masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a...

masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.

Record
GHSA-22g9-8497-wf8p
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
masqmail
Debian:3.0
From an advisory covering 2 CVEs
before 0.1.16-2.2, plus listed versions
0.1.16-2.1
0.1.16-2.2
masqmail
Debian:3.1
From an advisory covering 2 CVEs
before 0.2.20-1sarge1, plus listed versions
0.2.20-1
0.2.20-1sarge1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2663 is a low vulnerability (CVSS 2.1) in Masqmail, published September 21, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. No source names a fixed version.

References

Show 4 moreShow less
MoveEnter Open