Vulnerability in Maildrop

CVE-2005-2655

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

EPSS: 0.015 (71.3th percentile) — read the EPSS interpretation.

Affected products

  • Maildrop — versions 0.50, 0.51, 0.51b
  • N/a — versions n/a

References