Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Dovecot Authentication Cache Security Bypass Vulnerability

Dovecot is prone to a security-bypass vulnerability.

An attacker may exploit this condition to bypass certain security restrictions and obtain potentially sensitive data; other attacks are also possible.

Please note that default configurations of Dovecot are not affected by this issue. The chances of attack are further reduced because Dovecot must be configured in a specific way, making exploits highly circumstantial.

Versions higher than Dovecot 1.0.rc11 and prior to Dovecot 1.0.10 are vulnerable to this issue.







 

Privacy Statement
Copyright 2008, SecurityFocus