• info
• discussion
• exploit
• solution
• references

maildrop Group Permission Dropping Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for details.


Debian Linux 4.0 arm

• Debian maildrop_2.0.2-11+etch1_arm.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.2 -11+etch1_arm.deb

Debian Linux 5.0 ia-64

• Debian maildrop_2.0.4-3+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.4 -3+lenny1_ia64.deb

Debian Linux 4.0 powerpc

• Debian maildrop_2.0.2-11+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.2 -11+etch1_powerpc.deb

Debian Linux 5.0 alpha

• Debian maildrop_2.0.4-3+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.4 -3+lenny1_alpha.deb

Debian Linux 5.0 ia-32

• Debian maildrop_2.0.4-3+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.4 -3+lenny1_i386.deb

Debian Linux 5.0 s/390

• Debian maildrop_2.0.4-3+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.4 -3+lenny1_s390.deb

Debian Linux 5.0 mipsel

• Debian maildrop_2.0.4-3+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.4 -3+lenny1_mipsel.deb

Debian Linux 4.0 amd64

• Debian maildrop_2.0.2-11+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.2 -11+etch1_amd64.deb

Debian Linux 4.0 ia-32

• Debian maildrop_2.0.2-11+etch1_i386.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.2 -11+etch1_i386.deb

Debian Linux 5.0 hppa

• Debian maildrop_2.0.4-3+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.4 -3+lenny1_hppa.deb

Debian Linux 4.0 hppa

• Debian maildrop_2.0.2-11+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.2 -11+etch1_hppa.deb

Debian Linux 4.0 s/390

• Debian maildrop_2.0.2-11+etch1_s390.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.2 -11+etch1_s390.deb

Debian Linux 5.0 arm

• Debian maildrop_2.0.4-3+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.4 -3+lenny1_arm.deb

Debian Linux 4.0 alpha

• Debian maildrop_2.0.2-11+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.2 -11+etch1_alpha.deb

maildrop maildrop 2.3

• maildrop maildrop-2.4.0.tar.bz2
  http://sourceforge.net/projects/courier/files/maildrop/2.4.0/maildrop- 2.4.0.tar.bz2

Debian Linux 5.0 armel

• Debian maildrop_2.0.4-3+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.4 -3+lenny1_armel.deb

Debian Linux 5.0 amd64

• Debian maildrop_2.0.4-3+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.4 -3+lenny1_amd64.deb

Debian Linux 4.0 mipsel

• Debian maildrop_2.0.2-11+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.2 -11+etch1_mipsel.deb

Debian Linux 5.0 mips

• Debian maildrop_2.0.4-3+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.4 -3+lenny1_mips.deb

Debian Linux 5.0 powerpc

• Debian maildrop_2.0.4-3+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.4 -3+lenny1_powerpc.deb

Debian Linux 4.0 ia-64

• Debian maildrop_2.0.2-11+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/m/maildrop/maildrop_2.0.2 -11+etch1_ia64.deb