The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade maildrop | Jul 30, 2024 | Feb 4, 2010 |
| Gentoo Linux | — | Upgrade mail-filter/maildrop. | Oct 30, 2017 | Feb 4, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub