CVE-2003-1324
UnknownEPSS 0.29%
Last modified
CVE-2003-1324 is a vulnerability of currently unknown severity. Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group.. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Elmme-Mailer | Elm Me\+ | 2.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2003-1324?
Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group.
How severe is CVE-2003-1324?
Severity scoring for CVE-2003-1324 is pending analysis. The EPSS model estimates a 0.29% probability of exploitation in the next 30 days.
How do I fix CVE-2003-1324?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2003
- CVE-2003-1318Twilight Webserver 1.3.3.0 allows remote attackers to cause …
- CVE-2003-1319Multiple buffer overflows in SmartFTP 1.0.973, and other ver…
- CVE-2003-1320SonicWALL firmware before 6.4.0.1 allows remote attackers to…
- CVE-2003-1321Buffer overflow in Avant Browser 8.02 allows remote attacker…
- CVE-2003-1322Multiple stack-based buffer overflows in Atrium MERCUR IMAPD…
- CVE-2003-1323Elm ME+ 2.4 before PL109S, when installed setgid mail and th…
- CVE-2003-1325The SV_CheckForDuplicateNames function in Valve Software Hal…
- CVE-2003-1326Microsoft Internet Explorer 5.5 and 6.0 allows remote attack…
- CVE-2003-1327Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 …
- CVE-2003-1328The showHelp() function in Microsoft Internet Explorer 5.01,…
- CVE-2003-1329ftpd.c in wu-ftpd 2.6.2, when running on "operating systems …
- CVE-2003-1330Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute c…
Are you affected by CVE-2003-1324?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST