Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Dovecot 'mail_extra_groups' Insecure Settings Local Unauthorized Access Vulnerability

Dovecot is prone to a vulnerability that can result in unauthorized access to arbitrary data.

This occurs when the 'mail_extra_groups' setting is enabled.

Attackers can leverage this issue to write or delete certain files or to harvest data that may aid in further attacks.

Dovecot 0.99.10.6 through 1.0.10 are vulnerable.







 

Privacy Statement
Copyright 2007, SecurityFocus