Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2010-3779
HistoryOct 06, 2010 - 12:00 a.m.

CVE-2010-3779

2010-10-0600:00:00
ubuntu.com
ubuntu.com
13

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.002

Percentile

60.8%

JSON

Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.beta2 grants the admin
permission to the owner of each mailbox in a non-public namespace, which
might allow remote authenticated users to bypass intended access
restrictions by changing the ACL of a mailbox, as demonstrated by a
symlinked shared mailbox.

Bugs

Notes

Author Note
sbeattie from upstream email at http://www.dovecot.org/list/dovecot/2010-October/053452.html it sounds like problem was introduced in 1.2.8, so earlier may not be vulnerable.
mdeslaur Code doesn’t seem present in karmic and older
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchdovecot< 1:1.2.9-1ubuntu6.3UNKNOWN
ubuntu10.10noarchdovecot< 1:1.2.12-1ubuntu8.1UNKNOWN

Related

debiancve 1
prion 1
nvd 1
cvelist 1
cve 1
debian 2
ubuntu 1
securityvulns 2
nessus 3
openvas 6
gentoo 1
debiancve
debiancve
CVE-2010-3779
2010-10-06 21:00:01
prion
prion
Design/Logic Flaw
2010-10-06 21:00:00
nvd
nvd
CVE-2010-3779
2010-10-06 21:00:01
cvelist
cvelist
CVE-2010-3779
2010-10-06 20:00:00
cve
cve
CVE-2010-3779
2010-10-06 21:00:01
debian
debian
BSA-006 Security Update for dovecot
2010-10-13 09:56:59
BSA-006 Security Update for dovecot
2010-10-12 21:45:52
ubuntu
ubuntu
Dovecot vulnerabilities
2011-02-07 00:00:00
securityvulns
securityvulns
[ MDVSA-2010:217 ] dovecot
2010-11-02 00:00:00
Dovecot multiple security vulnerabilities
2010-11-02 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : dovecot (MDVSA-2010:217)
2010-11-01 00:00:00
Ubuntu 10.04 LTS / 10.10 : dovecot vulnerabilities (USN-1059-1)
2011-02-08 00:00:00
GLSA-201110-04 : Dovecot: Multiple vulnerabilities
2011-10-11 00:00:00
openvas
openvas
Ubuntu Update for dovecot vulnerabilities USN-1059-1
2011-02-11 00:00:00
Mandriva Update for dovecot MDVSA-2010:217 (dovecot)
2010-11-16 00:00:00
Mandriva Update for dovecot MDVSA-2010:217 (dovecot)
2010-11-16 00:00:00
gentoo
gentoo
Dovecot: Multiple vulnerabilities
2011-10-10 00:00:00

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.002

Percentile

60.8%

JSON
Related for UB:CVE-2010-3779
debiancve1prion1nvd1cvelist1cve1debian2ubuntu1securityvulns2nessus3openvas6gentoo1