CVE-2007-1588

CVE-2007-1588 affects MyServer 0.8.5: the code path in server.cpp calls Process::setuid before Process::setgid, failing to drop privileges and potentially allowing remote attackers to run CGI programs with unintended privileges.