Wed, Nov 19, 2008 at 02:00:00PM -0700, security (at) mandriva (dot) com [email concealed] wrote:
> The ACL plugin in dovecot prior to version 1.1.6 allowed attackers to
> bypass intended access restrictions by using the 'k' right to create
> unauthorized 'parent/child/child' mailboxes (CVE-2008-4578).
Wed, Nov 19, 2008 at 02:00:00PM -0700, security (at) mandriva (dot) com [email concealed] wrote:
> The ACL plugin in dovecot prior to version 1.1.6 allowed attackers to
> bypass intended access restrictions by using the 'k' right to create
> unauthorized 'parent/child/child' mailboxes (CVE-2008-4578).
Are you rea...
[ more ]