Lucene search
RedhatCVELIST:CVE-2010-0301HistoryFeb 04, 2010 - 6:00 p.m.
CVE-2010-0301
2010-02-0418:00:00
redhat
www.cve.org
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user’s home directory, which allows local users to gain privileges via a crafted file.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=564601
marc.info/?l=oss-security&m=126462927918840&w=2
marc.info/?l=oss-security&m=126468324913920&w=2
marc.info/?l=oss-security&m=126468551017070&w=2
marc.info/?l=oss-security&m=126468618017829&w=2
secunia.com/advisories/38367
secunia.com/advisories/38374
securitytracker.com/id?1023515
www.courier-mta.org/maildrop/changelog.html
www.debian.org/security/2010/dsa-1981
bugzilla.redhat.com/show_bug.cgi?id=559681
exchange.xforce.ibmcloud.com/vulnerabilities/55980
Related
openvas
openvas
Fedora Update for maildrop FEDORA-2010-1927
2010-03-02 00:00:00
Gentoo Security Advisory GLSA 201009-02 (maildrop)
2011-03-09 00:00:00
Fedora Update for maildrop FEDORA-2010-1927
2010-03-02 00:00:00
debiancve
debiancve
CVE-2010-0301
2010-02-04 20:15:23
nessus
nessus
GLSA-201009-02 : Maildrop: privilege escalation
2010-09-07 00:00:00
Fedora 12 : maildrop-2.4.0-12.fc12 (2010-1863)
2010-07-01 00:00:00
Debian DSA-1981-1 : maildrop - privilege escalation
2010-02-24 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1981-2] New maildrop packages fix regression
2010-02-04 00:00:00
maildrop privilege escalation
2010-02-04 00:00:00
prion
prion
Code injection
2010-02-04 20:15:00
fedora
fedora
[SECURITY] Fedora 12 Update: maildrop-2.4.0-12.fc12
2010-02-16 13:10:19
[SECURITY] Fedora 11 Update: maildrop-2.4.0-12.fc11
2010-02-16 13:21:49
nvd
nvd
CVE-2010-0301
2010-02-04 20:15:23
debian
debian
[SECURITY] [DSA 1981-2] New maildrop packages fix regression
2010-01-28 20:19:50
cve
cve
CVE-2010-0301
2010-02-04 20:15:23
seebug
seebug
maildrop 2.3.0本地权限提升漏洞
2010-02-06 00:00:00
gentoo
gentoo
Maildrop: privilege escalation
2010-09-06 00:00:00
ubuntucve
ubuntucve
CVE-2010-0301
2010-02-04 00:00:00