| Package | Affected versions | Patched versions |
|---|---|---|
| maildrop | = 0.50= 0.51= 0.51b= 0.51c= 0.54= 0.54a= 0.54b= 0.55= 0.55a= 0.55b= 0.55c= 0.60= 0.61= 0.62= 0.63= 0.64= 0.65= 0.70= 0.71= 0.72= 0.73= 0.74= 0.75= 0.76= 0.99.1= 0.99.2= 1.0= 1.1= 1.2= 1.2.1= 1.2.2= 1.3.0= 1.3.1= 1.3.3= 1.3.4= 1.3.5= 1.3.6= 1.3.7= 1.3.8= 1.3.9= 1.4.0= 1.5.0= 1.5.1= 1.5.2 |
lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free