Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD75C24C1D-B688-11DD-88FD-001C2514716C
HistoryOct 05, 2008 - 12:00 a.m.

dovecot -- ACL plugin bypass vulnerabilities

2008-10-0500:00:00
vuxml.freebsd.org
26

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.005 Low

EPSS

Percentile

77.4%

JSON

Timo Sirainen reports in dovecot 1.1.4 release notes:

ACL plugin fixes: Negative rights were actually treated
as positive rights. ‘k’ right didn’t prevent creating
parent/child/child mailbox. ACL groups weren’t working.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchdovecot< 1.1.4UNKNOWN

Related

nessus 11
securityvulns 2
openvas 24
gentoo 1
nvd 2
cve 2
prion 2
ubuntucve 2
cvelist 2
fedora 2
debian 2
debiancve 2
veracode 1
redhat 1
oraclelinux 1
ubuntu 1
nessus
nessus
Mandriva Linux Security Advisory : dovecot (MDVSA-2008:232)
2009-04-23 00:00:00
FreeBSD : dovecot -- ACL plugin bypass vulnerabilities (75c24c1d-b688-11dd-88fd-001c2514716c)
2008-11-21 00:00:00
GLSA-200812-16 : Dovecot: Multiple vulnerabilities
2008-12-15 00:00:00
securityvulns
securityvulns
dovecot protection bypass
2008-11-21 00:00:00
[ MDVSA-2008:232 ] dovecot
2008-11-21 00:00:00
openvas
openvas
Dovecot ACL Plugin Security Bypass Vulnerabilities
2008-10-17 00:00:00
FreeBSD Ports: dovecot
2008-11-24 00:00:00
Mandriva Update for dovecot MDVSA-2008:232 (dovecot)
2009-04-09 00:00:00
gentoo
gentoo
Dovecot: Multiple vulnerabilities
2008-12-14 00:00:00
nvd
nvd
CVE-2008-4578
2008-10-15 20:08:02
CVE-2008-4577
2008-10-15 20:08:02
cve
cve
CVE-2008-4578
2008-10-15 20:08:02
CVE-2008-4577
2008-10-15 20:08:02
prion
prion
Security feature bypass
2008-10-15 20:08:00
Design/Logic Flaw
2008-10-15 20:08:00
ubuntucve
ubuntucve
CVE-2008-4578
2008-10-15 00:00:00
CVE-2008-4577
2008-10-15 00:00:00
cvelist
cvelist
CVE-2008-4578
2008-10-15 20:00:00
CVE-2008-4577
2008-10-15 20:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: dovecot-1.0.15-14.fc9
2008-10-30 12:49:05
[SECURITY] Fedora 8 Update: dovecot-1.0.15-14.fc8
2008-10-30 12:51:56
debian
debian
[Backports-security-announce] Security Update for dovecot
2008-11-28 21:24:35
[Backports-security-announce] Security Update for dovecot
2008-11-28 21:24:11
debiancve
debiancve
CVE-2008-4577
2008-10-15 20:08:02
CVE-2008-4578
2008-10-15 20:08:02
veracode
veracode
Access Control Bypass
2020-04-10 00:35:06
redhat
redhat
(RHSA-2009:0205) Low: dovecot security and bug fix update
2009-01-20 00:00:00
oraclelinux
oraclelinux
dovecot security and bug fix update
2009-01-27 00:00:00
ubuntu
ubuntu
Dovecot vulnerabilities
2009-09-28 00:00:00

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.005 Low

EPSS

Percentile

77.4%

JSON
Related for 75C24C1D-B688-11DD-88FD-001C2514716C
nessus11securityvulns2openvas24gentoo1nvd2cve2prion2ubuntucve2cvelist2fedora2debian2debiancve2veracode1redhat1oraclelinux1ubuntu1