sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.Referenceshttp://www.debian.org/security/2001/dsa-050https://exchange.xforce.ibmcloud.com/vulnerabilities/6430http://www.debian.org/security/2001/dsa-052