CVE-2011-3350

2019-11-1922:16:23

redhat

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

69.7%

JSON

masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping.

CNA Affected

[
  {
    "product": "masqmail",
    "vendor": "masqmail",
    "versions": [
      {
        "status": "affected",
        "version": "0.2.21 through 0.2.30"
      }
    ]
  }
]

References

access.redhat.com/security/cve/cve-2011-3350

bugs.debian.org/cgi-bin/bugreport.cgi?bug=638002

security-tracker.debian.org/tracker/CVE-2011-3350