Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2003-1314 | Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| http://www.elmme-mailer.org/elm-2.4ME+PL109S.patch.gz |
|
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-16T17:04:07.311Z
Reserved: 2007-03-29T00:00:00Z
Link: CVE-2003-1324
No data.
Status : Deferred
Published: 2003-12-31T05:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2003-1324
No data.
OpenCVE Enrichment
No data.
EUVD