debian/maildrop vulnerabilities

Latest debian/maildrop CVEs

Newest publication first

1. CVE-2010-0301 main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privi...

   Published 2010-02-04

   Medium·CVSS 6.9 EPSS 0.42%

   main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.

2. DSA-1981-1 maildrop - privilege escalation

   Published 2010-01-28

   Unknown

3. CVE-2005-2655 lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

   Published 2005-08-30

   High·CVSS 10.0 EPSS 1.5%

   lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

4. DSA-791-1 maildrop - missing privilege release

   Published 2005-08-30

   Unknown

5. DTSA-11-1 maildrop - local privilege escalation

   Published 2005-08-29

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.