The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
| Software | From | Fixed in |
|---|---|---|
| semi / semi | 1.14.3 | 1.14.3.x |
| debian / debian_linux | 3.0 | 3.0.x |