CVE-2003-1324
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD
Description
Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group.
Affected (1)
Products: Elmme Mailer: Elm Me+
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.4 |
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Timeline
No history available yet.