CVE-2010-0301: Maildrop

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.

Affected products

• Maildrop Maildrop: up to and including 2.3.0; version 0.50 only; version 0.51 only; version 0.51b only; version 0.51c only; version 0.54 only; …

Published 2010-02-04. Last modified 2026-06-16.