This host is installed Maildrop and is prone to Privilege Escalation vulnerability

Successful exploitation will allow local users to gain elevated privileges. Impact Level: Application.

Upgrade to Maildrop version 2.4.0 For updates refer to http://sourceforge.net/projects/courier/files/

The flaw is due to the error in the 'maildrop/main.C', when run by root with the '-d' option, uses the gid of root for execution of the mailfilter file in a user's home directory.

Maildrop version 2.3.0 and prior.

• http://secunia.com/advisories/38367
• http://securitytracker.com/alerts/2010/Jan/1023515.html
• http://xforce.iss.net/xforce/xfdb/55980

---

Updated on 2015-03-25