exploitDog

GHSA-mjj8-2wvx-jfh5

Опубликовано: 01 мая 2022

Источник: github

Github: Не прошло ревью

Описание

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2005-2655
http://www.debian.org/security/2005/dsa-791

EPSS

Процентиль: 71%

0.01481

Низкий

CVE ID

Связанные уязвимости

CVE-2005-2655

ubuntu

почти 21 год назад

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

CVE-2005-2655

nvd

почти 21 год назад

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

CVE-2005-2655

debian

почти 21 год назад

lockmail in maildrop before 1.5.3 does not drop privileges before exec ...

EPSS

Процентиль: 71%

0.01481

Низкий

CVE ID