Maildrop

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Maildrop records in CISA KEV

No Maildrop vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Maildrop 2 records MEDIUM

Records

2 records

TI-2005-02519 CVE-2005-2655 · GHSA-mjj8-2wvx-jfh5

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands…

MEDIUM 46

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01481 Published 2005-08-30 No fix listed

TI-2010-00288 CVE-2010-0301 · GHSA-7mg2-6qgr-3p64

main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid…

LOW 31

main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00423 Published 2010-02-04 No fix listed CWE-264

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0