Skip to content
OpenAdvisories
Unscored DSA-791-1 1 CVE

maildrop - missing privilege release

Published Aug 30, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 maildrop 1.5.3-1.1sarge1

Vulnerabilities 1

  • Unscored —

    lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain …