CVE-2008-2937

CVE-2008-2937 describes a vulnerability in Postfix versions 2.5 before 2.5.4 and 2.6 before 2.6-20080814, where the mail server would deliver emails to a mailbox file even if it wasn't owned by the intended recipient. This flaw allowed local users to read other users' email messages by creating a mailbox file with a corresponding account name. The vulnerability has a low CVSS score of 1.9, indicating a low severity, as it requires local access and medium attack complexity, with a potential impact of only confidentiality compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.