Lucene search
MitreCVELIST:CVE-2008-4870HistoryOct 31, 2008 - 10:00 p.m.
CVE-2008-4870
2008-10-3122:00:00
mitre
www.cve.org
dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.
References
secunia.com/advisories/32164
secunia.com/advisories/33149
secunia.com/advisories/33624
security.gentoo.org/glsa/glsa-200812-16.xml
www.openwall.com/lists/oss-security/2008/10/29/10
www.redhat.com/support/errata/RHSA-2009-0205.html
bugzilla.redhat.com/show_bug.cgi?id=436287
exchange.xforce.ibmcloud.com/vulnerabilities/46323
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10776
Related
prion
prion
Design/Logic Flaw
2008-11-01 00:00:00
cve
cve
CVE-2008-4870
2008-11-01 00:00:01
veracode
veracode
Information Disclosure
2020-04-10 00:35:06
debiancve
debiancve
CVE-2008-4870
2008-11-01 00:00:01
nvd
nvd
CVE-2008-4870
2008-11-01 00:00:01
ubuntucve
ubuntucve
CVE-2008-4870
2008-11-01 00:00:00
openvas
openvas
RedHat Security Advisory RHSA-2009:0205
2009-01-26 00:00:00
RedHat Security Advisory RHSA-2009:0205
2009-01-26 00:00:00
Oracle: Security Advisory (ELSA-2009-0205)
2015-10-08 00:00:00
nessus
nessus
Scientific Linux Security Update : dovecot on SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 5 : dovecot (RHSA-2009:0205)
2009-01-21 00:00:00
Oracle Linux 5 : dovecot (ELSA-2009-0205)
2023-09-07 00:00:00
redhat
redhat
(RHSA-2009:0205) Low: dovecot security and bug fix update
2009-01-20 00:00:00
oraclelinux
oraclelinux
dovecot security and bug fix update
2009-01-27 00:00:00
gentoo
gentoo
Dovecot: Multiple vulnerabilities
2008-12-14 00:00:00