CVE-2008-2936

CVE-2008-2936 describes a local privilege escalation vulnerability affecting Postfix versions before 2.3.15, 2.4.8, 2.5.4, and 2.6-20080814, specifically when the operating system supports hard links to symlinks. A local attacker can append email messages to a root-owned symlink by creating a hard link to it, potentially leading to privilege escalation if the symlink points to an init script. This vulnerability has a CVSS score of 6.2, indicating high impact on confidentiality, integrity, and availability, but requires high attack complexity and local access. While not listed on the KEV catalog or having significant community discussion or media coverage, an exploit for this vulnerability is publicly available on ExploitDB.