Security Advisory

CVE-2010-0301

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-02-04 18:00:00

Last updated 2024-08-07 00:45:11

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.

← Browse all CVEs View on cve.org ↗