CVE-2010-0301

main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.

• maildrop maildrop (<= 2.3.0) • maildrop maildrop 0.50 • maildrop maildrop 0.51 • maildrop maildrop 0.51b • maildrop maildrop 0.51c • maildrop maildrop 0.54 • maildrop maildrop 0.54a • maildrop maildrop 0.54b • maildrop maildrop 0.55 • maildrop maildrop 0.55a • maildrop maildrop 0.55b • maildrop maildrop 0.55c • maildrop maildrop 0.60 • maildrop maildrop 0.61 • maildrop maildrop 0.62 • maildrop maildrop 0.63 • maildrop maildrop 0.64 • maildrop maildrop 0.65 • maildrop maildrop 0.70 • maildrop maildrop 0.71 • maildrop maildrop 0.72 • maildrop maildrop 0.73 • maildrop maildrop 0.74 • maildrop maildrop 0.75 • maildrop maildrop 0.76 • maildrop maildrop 0.99.1 • maildrop maildrop 0.99.2 • maildrop maildrop 1.0 • maildrop maildrop 1.1 • maildrop maildrop 1.2 • maildrop maildrop 1.2.1 • maildrop maildrop 1.2.2 • maildrop maildrop 1.3.0 • maildrop maildrop 1.3.1 • maildrop maildrop 1.3.3 • maildrop maildrop 1.3.4 • maildrop maildrop 1.3.5 • maildrop maildrop 1.3.6 • maildrop maildrop 1.3.7 • maildrop maildrop 1.3.8 • maildrop maildrop 1.3.9 • maildrop maildrop 1.4.0 • maildrop maildrop 1.5.0 • maildrop maildrop 1.5.1 • maildrop maildrop 1.5.2 • maildrop maildrop 1.6.2 • maildrop maildrop 1.6.3 • maildrop maildrop 1.7.0 • maildrop maildrop 1.8.1 • maildrop maildrop 2.0.0 • maildrop maildrop 2.0.1 • maildrop maildrop 2.0.2 • maildrop maildrop 2.0.3 • maildrop maildrop 2.0.4 • maildrop maildrop 2.1 • maildrop maildrop 2.2