CVE-2010-3304
First published: Fri Sep 24 2010(Updated: )
The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configurations, which might allow remote attackers to read mailboxes that have unintended weak ACLs.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dovecot Dovecot | =1.2.2 | |
| Dovecot Dovecot | =1.2.7 | |
| Dovecot Dovecot | =1.2.4 | |
| Dovecot Dovecot | =1.2.9 | |
| Dovecot Dovecot | =1.2.11 | |
| Dovecot Dovecot | =1.2.1 | |
| Dovecot Dovecot | =1.2.8 | |
| Dovecot Dovecot | =1.2.6 | |
| Dovecot Dovecot | =1.2.5 | |
| Dovecot Dovecot | =1.2.10 | |
| Dovecot Dovecot | =1.2.3 | |
| Dovecot Dovecot | =1.2.0 | |
| Dovecot Dovecot | =1.2.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/41964
- http://www.openwall.com/lists/oss-security/2010/09/16/17
- http://www.openwall.com/lists/oss-security/2010/09/16/14
- http://www.dovecot.org/list/dovecot-news/2010-July/000163.html
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
- http://www.vupen.com/english/advisories/2010/2840
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:217
- http://www.ubuntu.com/usn/USN-1059-1
- http://secunia.com/advisories/43220
- http://www.vupen.com/english/advisories/2011/0301
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/author
- agent/severity
- agent/first-publish-date
- agent/softwarecombine
- agent/remedy
- agent/last-modified-date
- agent/description
- agent/type
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/dovecot
- canonical/dovecot dovecot
- version/dovecot dovecot/1.2.2
- version/dovecot dovecot/1.2.7
- version/dovecot dovecot/1.2.4
- version/dovecot dovecot/1.2.9
- version/dovecot dovecot/1.2.11
- version/dovecot dovecot/1.2.1
- version/dovecot dovecot/1.2.8
- version/dovecot dovecot/1.2.6
- version/dovecot dovecot/1.2.5
- version/dovecot dovecot/1.2.10
- version/dovecot dovecot/1.2.3
- version/dovecot dovecot/1.2.0
- version/dovecot dovecot/1.2.12