CVE-2007-6598: Medium severity Dovecot dovecot vulnerability
Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6598?
CVE-2007-6598 is considered a medium severity vulnerability due to the potential for remote authenticated users to gain unauthorized access.
How do I fix CVE-2007-6598?
To fix CVE-2007-6598, upgrade Dovecot to version 1.0.10 or later.
Who is affected by CVE-2007-6598?
CVE-2007-6598 affects installations of Dovecot versions before 1.0.10 with specific configuration options.
What can happen if CVE-2007-6598 is exploited?
Exploitation of CVE-2007-6598 allows an authenticated user to log in as another user with the same password.
How does CVE-2007-6598 affect LDAP authentication?
CVE-2007-6598 disrupts the proper maintenance of the LDAP+auth cache, leading to possible credential misuse among users.