| Package | Affected versions | Patched versions |
|---|---|---|
| maildrop | = 0.50= 0.51= 0.51b= 0.51c= 0.54= 0.54a= 0.54b= 0.55= 0.55a= 0.55b= 0.55c= 0.60= 0.61= 0.62= 0.63= 0.64= 0.65= 0.70= 0.71= 0.72= 0.73= 0.74= 0.75= 0.76= 0.99.1= 0.99.2= 1.0= 1.1= 1.2= 1.2.1= 1.2.2= 1.3.0= 1.3.1= 1.3.3= 1.3.4= 1.3.5= 1.3.6= 1.3.7= 1.3.8= 1.3.9= 1.4.0= 1.5.0= 1.5.1= 1.5.2= 1.6.2= 1.6.3= 1.7.0= 1.8.1= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.1= 2.2≤ 2.3.0 |
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free