CVE-2005-2655: lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments

Unscored severity · published Aug 30, 2005

CVE-2005-2655

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments

–

CVSS

1.5%

EPSS

On KEV

Description

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

Exploitation

Is it being used?

Exploit prediction (EPSS)1.5% · higher than 74% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Maildrop · Maildrop

0.50; 0.51; 0.51b; 0.51c; 0.54; 0.54a; +34 more · source: NVD

Affected product

Maildrop