CVE-2003-1323

Published: Dec 31, 2003Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group via unspecified vectors.

Affected (1)

Products: Elm Development Group: Elm

Elm Development Group

1 product

Elm

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Elm Development Group Elm	Version 2.4

References (2)

http://www.elmme-mailer.org/elm-2.4ME+PL109S.patch.gz

Source: cve@mitre.org

Patch

http://www.elmme-mailer.org/elm-2.4ME+PL109S.patch.gz

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.