NetSight
IP …
medium6.9

CVE-2010-0301

main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home director…

Impact

main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.

Affected products

VendorProductAffected versions
MaildropMaildrop
through 2.3.0
Versions 0.50, 0.51, 0.51b, 0.51c, 0.54

Weakness classification

CWE-264

References