cve/2020/CVE-2020-8014.md

### [CVE-2020-8014](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8014)
![](https://img.shields.io/static/v1?label=Product&message=openSUSE%20Leap%2015.1&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=openSUSE%20Tumbleweed&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=kopano-spamd%3C%2010.0.5-1.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=kopano-spamd%3C%2010.0.5-lp151.4.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-61%3A%20UNIX%20Symbolic%20Link%20(Symlink)%20Following&color=brighgreen)

### Description

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE Tumbleweed allowed local attackers with the privileges of the kopano user to escalate to root. This issue affects: openSUSE Leap 15.1 kopano-spamd versions prior to 10.0.5-lp151.4.1. openSUSE Tumbleweed kopano-spamd versions prior to 10.0.5-1.1.

### POC

#### Reference
- https://bugzilla.suse.com/show_bug.cgi?id=1164131
- https://bugzilla.suse.com/show_bug.cgi?id=1164131

#### Github
No PoCs found on GitHub currently.