CVE-2010-1123: Chip Salzenberg Deliver does not properly associate a lockfile with the user who created the file, which al...

Security readout for executives and security teams

CVE-2010-1123 affects the Deliver mail delivery program. A local user could create lockfiles for mailboxes they do not own, causing incoming email to be blocked for those mailboxes. This is an availability issue, not a data theft issue based on the provided sources. Exposure is most likely on legacy Unix-like mail systems using Chip Salzenberg Deliver, especially where untrusted or multiple local users have accounts. Systems not using Deliver are not indicated as affected by the provided sources. Treat as a targeted availability risk for legacy mail infrastructure. Prioritize review if Deliver is still used on shared systems or business email depends on affected hosts. Lower urgency if Deliver is absent or local user access is tightly controlled. Mitigation focus: Inventory mail servers for any installed or configured Deliver package.; Check operating system or package maintainer advisories for fixed Deliver builds.; Remove or replace Deliver if it is not required for mail delivery..

Prepared

Jun 28, 2026, 10:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.