← Back

Maildrop

maildrop

Vendor: Maildrop • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-0301
1Maildrop
1Maildrop
Apr 29, 2026
Feb 4, 2010
N/A· v4
N/A· v3
6.9 MEDIUM· v2
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted...Show more
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.Show less
CVE-2005-2655
1Maildrop
1Maildrop
Apr 16, 2026
Aug 30, 2005
N/A· v4
N/A· v3
10.0 HIGH· v2
lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.