6.9

CVE-2010-0301

main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Maildrop ≫ Maildrop Version <= 2.3.0
Maildrop ≫ Maildrop Version 0.50
Maildrop ≫ Maildrop Version 0.51
Maildrop ≫ Maildrop Version 0.51b
Maildrop ≫ Maildrop Version 0.51c
Maildrop ≫ Maildrop Version 0.54
Maildrop ≫ Maildrop Version 0.54a
Maildrop ≫ Maildrop Version 0.54b
Maildrop ≫ Maildrop Version 0.55
Maildrop ≫ Maildrop Version 0.55a
Maildrop ≫ Maildrop Version 0.55b
Maildrop ≫ Maildrop Version 0.55c
Maildrop ≫ Maildrop Version 0.60
Maildrop ≫ Maildrop Version 0.61
Maildrop ≫ Maildrop Version 0.62
Maildrop ≫ Maildrop Version 0.63
Maildrop ≫ Maildrop Version 0.64
Maildrop ≫ Maildrop Version 0.65
Maildrop ≫ Maildrop Version 0.70
Maildrop ≫ Maildrop Version 0.71
Maildrop ≫ Maildrop Version 0.72
Maildrop ≫ Maildrop Version 0.73
Maildrop ≫ Maildrop Version 0.74
Maildrop ≫ Maildrop Version 0.75
Maildrop ≫ Maildrop Version 0.76
Maildrop ≫ Maildrop Version 0.99.1
Maildrop ≫ Maildrop Version 0.99.2
Maildrop ≫ Maildrop Version 1.0
Maildrop ≫ Maildrop Version 1.1
Maildrop ≫ Maildrop Version 1.2
Maildrop ≫ Maildrop Version 1.2.1
Maildrop ≫ Maildrop Version 1.2.2
Maildrop ≫ Maildrop Version 1.3.0
Maildrop ≫ Maildrop Version 1.3.1
Maildrop ≫ Maildrop Version 1.3.3
Maildrop ≫ Maildrop Version 1.3.4
Maildrop ≫ Maildrop Version 1.3.5
Maildrop ≫ Maildrop Version 1.3.6
Maildrop ≫ Maildrop Version 1.3.7
Maildrop ≫ Maildrop Version 1.3.8
Maildrop ≫ Maildrop Version 1.3.9
Maildrop ≫ Maildrop Version 1.4.0
Maildrop ≫ Maildrop Version 1.5.0
Maildrop ≫ Maildrop Version 1.5.1
Maildrop ≫ Maildrop Version 1.5.2
Maildrop ≫ Maildrop Version 1.6.2
Maildrop ≫ Maildrop Version 1.6.3
Maildrop ≫ Maildrop Version 1.7.0
Maildrop ≫ Maildrop Version 1.8.1
Maildrop ≫ Maildrop Version 2.0.0
Maildrop ≫ Maildrop Version 2.0.1
Maildrop ≫ Maildrop Version 2.0.2
Maildrop ≫ Maildrop Version 2.0.3
Maildrop ≫ Maildrop Version 2.0.4
Maildrop ≫ Maildrop Version 2.1
Maildrop ≫ Maildrop Version 2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.337
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564601
http://marc.info/?l=oss-security&m=126462927918840&w=2
http://marc.info/?l=oss-security&m=126468324913920&w=2
http://marc.info/?l=oss-security&m=126468551017070&w=2
http://marc.info/?l=oss-security&m=126468618017829&w=2
http://secunia.com/advisories/38367
Vendor Advisory
http://secunia.com/advisories/38374
Vendor Advisory
http://securitytracker.com/id?1023515
http://www.courier-mta.org/maildrop/changelog.html
http://www.debian.org/security/2010/dsa-1981
https://bugzilla.redhat.com/show_bug.cgi?id=559681
https://exchange.xforce.ibmcloud.com/vulnerabilities/55980