CVE:CVE-2010-0301
CNNVD:CNNVD-201002-029
maildrop是带有过滤功能的邮件传输代理。 
如果root用户以-d选项运行maildrop，则main.C使用了root的gid执行用户主目录中的.mailfilter，这允许本地用户通过特制文件获得权限提升。成功攻击要求maildrop编译为没有设置RESET_GID，如邮件目录没有使用粘着位。
solution:Upgrade maildrop maildrop to a higher version than 2.3.0,0.50,0.51,0.51b,0.51c,0.54,0.54a,0.54b,0.55,0.55a,0.55b,0.55c,0.60,0.61,0.62,0.63,0.64,0.65,0.70,0.71,0.72,0.73,0.74,0.75,0.76,0.99.1,0.99.2,1.0,1.1,1.2,1.2.1,1.2.2,1.3.0,1.3.1,1.3.3,1.3.4,1.3.5,1.3.6,1.3.7,1.3.8,1.3.9,1.4.0,1.5.0,1.5.1,1.5.2,1.6.2,1.6.3,1.7.0,1.8.1,2.0.0,2.0.1,2.0.2,2.0.3,2.0.4,2.1,2.2,and avoid the version (,2.3.0],0.50,0.51,0.51b,0.51c,0.54,0.54a,0.54b,0.55,0.55a,0.55b,0.55c,0.60,0.61,0.62,0.63,0.64,0.65,0.70,0.71,0.72,0.73,0.74,0.75,0.76,0.99.1,0.99.2,1.0,1.1,1.2,1.2.1,1.2.2,1.3.0,1.3.1,1.3.3,1.3.4,1.3.5,1.3.6,1.3.7,1.3.8,1.3.9,1.4.0,1.5.0,1.5.1,1.5.2,1.6.2,1.6.3,1.7.0,1.8.1,2.0.0,2.0.1,2.0.2,2.0.3,2.0.4,2.1,2.2