{
  "modified": "2025-08-09T19:01:27Z",
  "published": "2010-02-04T20:15:23Z",
  "id": "CVE-2010-0301",
  "details": "main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.",
  "references": [
    {
      "type": "ADVISORY",
      "url": "http://secunia.com/advisories/38367"
    },
    {
      "type": "ADVISORY",
      "url": "http://secunia.com/advisories/38374"
    },
    {
      "type": "ADVISORY",
      "url": "http://www.debian.org/security/2010/dsa-1981"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=559681"
    },
    {
      "type": "WEB",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564601"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=oss-security\u0026m=126462927918840\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=oss-security\u0026m=126468324913920\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=oss-security\u0026m=126468551017070\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=oss-security\u0026m=126468618017829\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1023515"
    },
    {
      "type": "WEB",
      "url": "http://www.courier-mta.org/maildrop/changelog.html"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55980"
    }
  ]
}
