SUSE Security Announcement – During a source code audit the SuSE Security-Team discovered a local privilege escalation bug as well as a mailbox ownership problem in postfix. The first bug allowed local users to execute arbitrary commands as root while the second one allowed local users to read other users mail.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/69111/SUSE-SA-2008-040.txt
Source: https://packetstormsecurity.com/files/69111/SUSE-SA-2008-040.txt.html