CVE-2005-2655

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2005/dsa-791Patch, Vendor Advisory
http://www.debian.org/security/2005/dsa-791Patch, Vendor Advisory

Timeline

Published: Aug 30, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-26562.1Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of se CVE-2005-26574.6Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the ca CVE-2005-26587.5Buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code CVE-2005-265910.0Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact and attack vec CVE-2005-26602.1apachetop 0.12.5 and earlier, when running in debug mode, allows local users to create or append to arbitrary files via a symlink attack on CVE-2005-26617.5Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers t CVE-2005-26627.5masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized wh CVE-2005-26632.1masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.CVE-2005-26642.1Whisper 32 1.16, and possibly earlier versions, stores passwords in plaintext in memory, which allows local users to obtain the password usi CVE-2005-26657.5Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitra CVE-2005-26661.2SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the k CVE-2005-26675.0Unknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 a