Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.
| Software | From | Fixed in |
|---|---|---|
| debian / internet_message | 141-0 | 141-0.x |
| debian / internet_message | 133-0 | 133-0.x |