CVE-2004-0880

CVE-2004-0880 describes a local privilege escalation vulnerability in getmail 4.x before version 4.2.0, specifically when the application is run as root. An attacker can exploit this by using a symlink attack on an mbox file, leading to the overwriting of arbitrary files on the system. The vulnerability has a low CVSS score of 1.2, indicating a local attack vector with high attack complexity and a low impact on integrity, with no impact on confidentiality or availability. There is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB. Despite its age and low severity, the CVE has garnered significant community discussion, with 10 mentions, placing it in the top 1% for community attention.