CVE:CVE-2002-0469
CNNVD:CNNVD-200208-220
snapshot 20020125的Ecartis (以前的Listar) 1.0.0及其早期版本在Ecartis安装setuid-root，“lock-to-user”没有设置且ecartis被某些MTA's调用时不能正确终止特权。本地用户利用该漏洞提升特权。
solution:Upgrade ecartis ecartis to a higher version than 1.0.0_snapshot_2002-01-21,1.0.0_snapshot_2002-01-25,and avoid the version 1.0.0_snapshot_2002-01-21,1.0.0_snapshot_2002-01-25; Upgrade listar listar to a higher version than 0.126a,0.127a,0.129a,and avoid the version 0.126a,0.127a,0.129a