CVE-2005-2655

EPSS 0.40%

maildrop - local privilege escalation

Published: 8/30/2005Modified: 4/28/2026

Description

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

Affected packages (3)

Debian/maildropfrom 0, < 2.0.2-7
Debian/maildropfrom 0, < 1.5.3-1.1sarge1
Debian/maildropfrom 0, < 1.5.3-1.1etch1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2005-2655