CVE-2010-0301

Published: Feb 4, 2010Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.

Affected (56)

Products: Maildrop: Maildrop

Maildrop

1 product

Maildrop

Configuration A

56 vulnerable

Vulnerable Software	Affected Versions
Maildrop Maildrop	version ≤ 2.3.0
Maildrop Maildrop	Version 0.50
Maildrop Maildrop	Version 0.51
Maildrop Maildrop	Version 0.51b
Maildrop Maildrop	Version 0.51c
Maildrop Maildrop	Version 0.54
Maildrop Maildrop	Version 0.54a
Maildrop Maildrop	Version 0.54b
Maildrop Maildrop	Version 0.55
Maildrop Maildrop	Version 0.55a
Maildrop Maildrop	Version 0.55b
Maildrop Maildrop	Version 0.55c
Maildrop Maildrop	Version 0.60
Maildrop Maildrop	Version 0.61
Maildrop Maildrop	Version 0.62
Maildrop Maildrop	Version 0.63
Maildrop Maildrop	Version 0.64
Maildrop Maildrop	Version 0.65
Maildrop Maildrop	Version 0.70
Maildrop Maildrop	Version 0.71
Maildrop Maildrop	Version 0.72
Maildrop Maildrop	Version 0.73
Maildrop Maildrop	Version 0.74
Maildrop Maildrop	Version 0.75
Maildrop Maildrop	Version 0.76
Maildrop Maildrop	Version 0.99.1
Maildrop Maildrop	Version 0.99.2
Maildrop Maildrop	Version 1.0
Maildrop Maildrop	Version 1.1
Maildrop Maildrop	Version 1.2.1
Maildrop Maildrop	Version 1.2.2
Maildrop Maildrop	Version 1.2
Maildrop Maildrop	Version 1.3.0
Maildrop Maildrop	Version 1.3.1
Maildrop Maildrop	Version 1.3.3
Maildrop Maildrop	Version 1.3.4
Maildrop Maildrop	Version 1.3.5
Maildrop Maildrop	Version 1.3.6
Maildrop Maildrop	Version 1.3.7
Maildrop Maildrop	Version 1.3.8
Maildrop Maildrop	Version 1.3.9
Maildrop Maildrop	Version 1.4.0
Maildrop Maildrop	Version 1.5.0
Maildrop Maildrop	Version 1.5.1
Maildrop Maildrop	Version 1.5.2
Maildrop Maildrop	Version 1.6.2
Maildrop Maildrop	Version 1.6.3
Maildrop Maildrop	Version 1.7.0
Maildrop Maildrop	Version 1.8.1
Maildrop Maildrop	Version 2.0.0
Maildrop Maildrop	Version 2.0.1
Maildrop Maildrop	Version 2.0.2
Maildrop Maildrop	Version 2.0.3
Maildrop Maildrop	Version 2.0.4
Maildrop Maildrop	Version 2.1
Maildrop Maildrop	Version 2.2