| Package | Affected versions | Patched versions |
|---|---|---|
| ecartis | = 1.0.0_snapshot_2002-01-21= 1.0.0_snapshot_2002-01-25 | |
| listar | = 0.126a= 0.127a= 0.129a |
Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free