CVE-2005-2230: Electronic Mail Operator (elmo) 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which...

Security readout for executives and security teams

Elmo, an older command-line email client, created a temporary statistics file insecurely. On a shared system, a local user could exploit that behavior to overwrite files they should not control. This is mainly a concern where elmo is installed on multi-user Unix-like hosts. Exposure is likely limited to systems with elmo 1.3.2-r1 or earlier installed, especially shared shell servers or multi-user workstations where untrusted local users have accounts. Treat this as a legacy shared-host risk. It is not described as remotely exploitable, but arbitrary file overwrite can matter on multi-user systems. Prioritize inventory and removal or update if elmo is present. Mitigation focus: Check whether elmo is installed and whether versions are 1.3.2-r1 or earlier.; Remove elmo where it is not operationally required.; Check vendor or distribution advisories for a corrected package or supported workaround..

Prepared

Jun 29, 2026, 19:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.