CVE ID:	CVE-2010-0301
Description:	main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.
Test IDs:	1.3.6.1.4.1.25623.1.0.800292   1.3.6.1.4.1.25623.1.0.861644   1.3.6.1.4.1.25623.1.0.66918   1.3.6.1.4.1.25623.1.0.66774   1.3.6.1.4.1.25623.1.0.66913   1.3.6.1.4.1.25623.1.0.861716   1.3.6.1.4.1.25623.1.0.66835   1.3.6.1.4.1.25623.1.0.66775   1.3.6.1.4.1.25623.1.0.69026
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0301 1023515 http://securitytracker.com/id?1023515 38367 http://secunia.com/advisories/38367 38374 http://secunia.com/advisories/38374 DSA-1981 http://www.debian.org/security/2010/dsa-1981 [oss-security] 20100127 CVE id request: maildrop http://marc.info/?l=oss-security&m=126462927918840&w=2 [oss-security] 20100128 Re: CVE id request: maildrop http://marc.info/?l=oss-security&m=126468324913920&w=2 [oss-security] 20100128 Re: CVE id request: maildrop http://marc.info/?l=oss-security&m=126468551017070&w=2 [oss-security] 20100128 Re: CVE id request: maildrop http://marc.info/?l=oss-security&m=126468618017829&w=2 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564601 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564601 http://www.courier-mta.org/maildrop/changelog.html http://www.courier-mta.org/maildrop/changelog.html https://bugzilla.redhat.com/show_bug.cgi?id=559681 https://bugzilla.redhat.com/show_bug.cgi?id=559681 maildrop-group-priv-escalation(55980) https://exchange.xforce.ibmcloud.com/vulnerabilities/55980