CVEvulnerability

CVE-2005-2655

10.0 HIGH Published 2005-08-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-08-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

Affected configurations

• maildrop maildrop 0.50 • maildrop maildrop 0.51 • maildrop maildrop 0.51b • maildrop maildrop 0.51c • maildrop maildrop 0.54 • maildrop maildrop 0.54a • maildrop maildrop 0.54b • maildrop maildrop 0.55 • maildrop maildrop 0.55a • maildrop maildrop 0.55b • maildrop maildrop 0.55c • maildrop maildrop 0.60 • maildrop maildrop 0.61 • maildrop maildrop 0.62 • maildrop maildrop 0.63 • maildrop maildrop 0.64 • maildrop maildrop 0.65 • maildrop maildrop 0.70 • maildrop maildrop 0.71 • maildrop maildrop 0.72 • maildrop maildrop 0.73 • maildrop maildrop 0.74 • maildrop maildrop 0.75 • maildrop maildrop 0.76 • maildrop maildrop 0.99.1 • maildrop maildrop 0.99.2 • maildrop maildrop 1.0 • maildrop maildrop 1.1 • maildrop maildrop 1.2 • maildrop maildrop 1.2.1 • maildrop maildrop 1.2.2 • maildrop maildrop 1.3.0 • maildrop maildrop 1.3.1 • maildrop maildrop 1.3.3 • maildrop maildrop 1.3.4 • maildrop maildrop 1.3.5 • maildrop maildrop 1.3.6 • maildrop maildrop 1.3.7 • maildrop maildrop 1.3.8 • maildrop maildrop 1.3.9 • maildrop maildrop 1.4.0 • maildrop maildrop 1.5.0 • maildrop maildrop 1.5.1 • maildrop maildrop 1.5.2

References