6.9

CVE-2010-0301

main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Maildrop ≫ Maildrop Version <= 2.3.0
Maildrop ≫ Maildrop Version0.50
Maildrop ≫ Maildrop Version0.51
Maildrop ≫ Maildrop Version0.51b
Maildrop ≫ Maildrop Version0.51c
Maildrop ≫ Maildrop Version0.54
Maildrop ≫ Maildrop Version0.54a
Maildrop ≫ Maildrop Version0.54b
Maildrop ≫ Maildrop Version0.55
Maildrop ≫ Maildrop Version0.55a
Maildrop ≫ Maildrop Version0.55b
Maildrop ≫ Maildrop Version0.55c
Maildrop ≫ Maildrop Version0.60
Maildrop ≫ Maildrop Version0.61
Maildrop ≫ Maildrop Version0.62
Maildrop ≫ Maildrop Version0.63
Maildrop ≫ Maildrop Version0.64
Maildrop ≫ Maildrop Version0.65
Maildrop ≫ Maildrop Version0.70
Maildrop ≫ Maildrop Version0.71
Maildrop ≫ Maildrop Version0.72
Maildrop ≫ Maildrop Version0.73
Maildrop ≫ Maildrop Version0.74
Maildrop ≫ Maildrop Version0.75
Maildrop ≫ Maildrop Version0.76
Maildrop ≫ Maildrop Version0.99.1
Maildrop ≫ Maildrop Version0.99.2
Maildrop ≫ Maildrop Version1.0
Maildrop ≫ Maildrop Version1.1
Maildrop ≫ Maildrop Version1.2
Maildrop ≫ Maildrop Version1.2.1
Maildrop ≫ Maildrop Version1.2.2
Maildrop ≫ Maildrop Version1.3.0
Maildrop ≫ Maildrop Version1.3.1
Maildrop ≫ Maildrop Version1.3.3
Maildrop ≫ Maildrop Version1.3.4
Maildrop ≫ Maildrop Version1.3.5
Maildrop ≫ Maildrop Version1.3.6
Maildrop ≫ Maildrop Version1.3.7
Maildrop ≫ Maildrop Version1.3.8
Maildrop ≫ Maildrop Version1.3.9
Maildrop ≫ Maildrop Version1.4.0
Maildrop ≫ Maildrop Version1.5.0
Maildrop ≫ Maildrop Version1.5.1
Maildrop ≫ Maildrop Version1.5.2
Maildrop ≫ Maildrop Version1.6.2
Maildrop ≫ Maildrop Version1.6.3
Maildrop ≫ Maildrop Version1.7.0
Maildrop ≫ Maildrop Version1.8.1
Maildrop ≫ Maildrop Version2.0.0
Maildrop ≫ Maildrop Version2.0.1
Maildrop ≫ Maildrop Version2.0.2
Maildrop ≫ Maildrop Version2.0.3
Maildrop ≫ Maildrop Version2.0.4
Maildrop ≫ Maildrop Version2.1
Maildrop ≫ Maildrop Version2.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.126
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.