critical10.0
CVE-2005-2655
lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.
Impact
lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maildrop | Maildrop | Versions 0.50, 0.51, 0.51b, 0.51c, 0.54, 0.54a |