59 matches found
[SECURITY] Fedora 12 Update: maildrop-2.4.0-12.fc12
maildrop is the mail filter/mail delivery agent that's used by the Courier Mail Server. This is a standalone build of the maildrop mail filter that can be used with other mail servers. maildrop is a replacement for your local mail delivery agent. maildrop reads a mail message from standard input,...
Maildrop < 2.4.0 Privilege Escalation Vulnerability
Maildrop is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Maildrop Privilege Escalation Vulnerability
This host is installed Maildrop and is prone to Privilege Escalation vulnerability OpenVAS Vulnerability Test $Id: gbmaildropprivescvuln.nasl 4919 2017-01-02 15:22:45Z cfi $ Maildrop Privilege Escalation Vulnerability. Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Maildrop Version Detection
This script finds the installed Maildrop version and saves the result in KB. OpenVAS Vulnerability Test $Id: gbmaildropdetect.nasl 7823 2017-11-20 08:54:04Z cfischer $ Maildrop Version Detection Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This...
Maildrop Version Detection
This script finds the installed Maildrop version. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
maildrop 2.3.0本地权限提升漏洞
CVE ID: CVE-2010-0301 maildrop是带有过滤功能的邮件传输代理。 如果root用户以-d选项运行maildrop,则main.C使用了root的gid执行用户主目录中的.mailfilter,这允许本地用户通过特制文件获得权限提升。成功攻击要求maildrop编译为没有设置RESETGID,如邮件目录没有使用粘着位。 Double Precision Inc. maildrop 2.3.0 厂商补丁: Debian ------ Debian已经为此发布了一个安全公告(DSA-1981-1)以及相应补丁: DSA-1981-1:New maildrop...
CVE-2010-0301
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file...
CVE-2010-0301
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file...
DEBIAN-CVE-2010-0301
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file...
CVE-2010-0301
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file...
Code injection
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file...
UBUNTU-CVE-2010-0301
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file...
CVE-2010-0301
Affected software: maildrop (2.3.0 and earlier). Root-privilege escalation path: when run by root with the -d option, maildrop executes the user’s .mailfilter file using root GID, allowing local privilege escalation. Impact: arbitrary commands with root privileges if a crafted .mailfilter is prov...
CVE-2010-0301
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file...
CVE-2010-0301
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file...
[SECURITY] [DSA 1981-2] New maildrop packages fix regression
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1981-2 [email protected] http://www.debian.org/security/ Steffen Joeris January 28, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1981-1] New maildrop packages fix privilege escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1981-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 28, 2010 http://www.debian.org/security/faq -...
maildrop privilege escalation
No description provided...
Debian Security Advisory DSA 1981-1 (maildrop)
The remote host is missing an update to maildrop announced via advisory DSA 1981-1. OpenVAS Vulnerability Test $Id: deb19811.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1981-1 maildrop Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian Security Advisory DSA 1981-2 (maildrop)
The remote host is missing an update to maildrop announced via advisory DSA 1981-2. OpenVAS Vulnerability Test $Id: deb19812.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1981-2 maildrop Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...