Security feature bypass

2008-10-1520:08:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the “k” right to create unauthorized “parent/child/child” mailboxes.

CPENameOperatorVersion
dovecoteq1.0.6
dovecoteq1.0.0-rc20
dovecoteq1.0.0-beta2
dovecoteq1.0.5
dovecoteq1.0.0-beta5
dovecoteq1.0
dovecoteq1.0.0-rc15
dovecoteq1.1
dovecoteq1.0.0-rc19
dovecoteq1.0.0-rc12

Name	Operator	Version
dovecot	eq	1.0.6
dovecot	eq	1.0.0-rc20
dovecot	eq	1.0.0-beta2
dovecot	eq	1.0.5
dovecot	eq	1.0.0-beta5
dovecot	eq	1.0
dovecot	eq	1.0.0-rc15
dovecot	eq	1.1
dovecot	eq	1.0.0-rc19
dovecot	eq	1.0.0-rc12