← Back

CVE-2005-2655

nvd nist
Published: Aug 30, 2005Modified: Apr 16, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

Affected (44)

Products: Maildrop: Maildrop
1 product
Maildrop
Configuration A
44 vulnerable
Vulnerable SoftwareAffected Versions
Maildrop
Version 0.50
Version 0.51
Version 0.51b
Version 0.51c
Version 0.54
Version 0.54a
Version 0.54b
Version 0.55
Version 0.55a
Version 0.55b
Version 0.55c
Version 0.60
Version 0.61
Version 0.62
Version 0.63
Version 0.64
Version 0.65
Version 0.70
Version 0.71
Version 0.72
Version 0.73
Version 0.74
Version 0.75
Version 0.76
Version 0.99.1
Version 0.99.2
Version 1.0
Version 1.1
Version 1.2.1
Version 1.2.2
Version 1.2
Version 1.3.0
Version 1.3.1
Version 1.3.3
Version 1.3.4
Version 1.3.5
Version 1.3.6
Version 1.3.7
Version 1.3.8
Version 1.3.9
Version 1.4.0
Version 1.5.0
Version 1.5.1
Version 1.5.2

References (2)

Source: security@debian.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.