Summary
This host is installed Maildrop and is prone to Privilege Escalation vulnerability
Impact
Successful exploitation will allow local users to gain elevated privileges.
Impact Level: Application.
Solution
Upgrade to Maildrop version 2.4.0
For updates refer to http://sourceforge.net/projects/courier/files/
Insight
The flaw is due to the error in the 'maildrop/main.C', when run by root with the '-d' option, uses the gid of root for execution of the mailfilter file in a user's home directory.
Affected
Maildrop version 2.3.0 and prior.
References
Severity
Classification
-
CVE CVE-2010-0301 -
CVSS Base Score: 6.9
AV:L/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities