What’s Vulnerable › Vulnerabilities
CVE-2005-2655
- Severity: critical (CVSS 10.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2005-08-30 · updated 2026-06-16
Description
lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.
Affected products
- Maildrop: 0.50, 0.51, 0.51b, 0.51c, 0.54, 0.54a (+38)
References
Get alerted when CVE-2005-2655 or the next vulnerability affects your stack