exploitDog

GHSA-mjj8-2wvx-jfh5

Опубликовано: 01 мая 2022

Источник: github

Github: Не прошло ревью

Описание

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

Ссылки

EPSS

Процентиль: 60%

0.00397

Низкий

CVE ID

Связанные уязвимости

CVE-2005-2655

ubuntu

около 20 лет назад

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

CVE-2005-2655

nvd

около 20 лет назад

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

CVE-2005-2655

debian

около 20 лет назад

lockmail in maildrop before 1.5.3 does not drop privileges before exec ...

EPSS

Процентиль: 60%

0.00397

Низкий

CVE ID