Vulnerability in Elmme-Mailer Elm Me\+
CVE-2003-1324
Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group.
EPSS: 0.003 (21.1th percentile) — read the EPSS interpretation.
Affected products
- Elmme-mailer Elm_me\+ — versions 2.4
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Patch)