CVE-2005-2655

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

Score

CVSS 2.0 10.0 Critical

Status

Modified - security@debian.org

Published

2005-08-30

Last modified

2024-09-17

Affected products

• Maildrop (Maildrop)

References

• http://www.debian.org/security/2005/dsa-791