CVE-2003-1324
Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group.
- Score
- CVSS 2.0 4.6 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2003-12-31
- Last modified
- 2024-09-16
Affected products
References
- http://www.elmme-mailer.org/elm-2.4ME+PL109S.patch.gz
