Description
lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2005-2656 | lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments. |
References
| Link | Providers |
|---|---|
| http://www.debian.org/security/2005/dsa-791 |
|
History
No history.
Status: PUBLISHED
Assigner: debian
Published:
Updated: 2024-09-17T00:56:09.991Z
Reserved: 2005-08-22T00:00:00.000Z
Link: CVE-2005-2655
No data.
Status : Modified
Published: 2005-08-30T17:03:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2005-2655
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD