Secunia

Jens Steube has reported two vulnerabilities in MasqMail, which potentially can be exploited by malicious, local users to gain escalated privileges.

1) An error in the sanitization of email addresses when the sending of a message fails, may be exploited to execute arbitrary commands with privileges of the mail user.

2) An unspecified error in the handling of log files may be exploited to overwrite arbitrary files via a symlink attack.

Solution
Grant only trusted users access to affected systems.
Further details available in Customer Area

Provided and/or discovered by
Jens Steube

Original Advisory
Mandriva:
http://www.mandriva.com/security/advisories?name=MDKSA-2005:168

Deep Links
Links available in Customer Area