• info
• discussion
• exploit
• solution
• references

Dovecot Insecure 'base_dir' Permissions Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.


Dovecot Dovecot 1.2

• Dovecot dovecot-1.2.8.tar.gz
  http://dovecot.org/releases/1.2/dovecot-1.2.8.tar.gz

Mandriva Linux Mandrake 2010.0 x86_64

• Mandriva dovecot-1.2.6-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-devel-1.2.6-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-gssapi-1.2.6-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-ldap-1.2.6-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-managesieve-1.2.6-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-mysql-1.2.6-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-pgsql-1.2.6-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-sieve-1.2.6-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-sqlite-1.2.6-1.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2010.0

• Mandriva dovecot-1.2.6-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-devel-1.2.6-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-gssapi-1.2.6-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-ldap-1.2.6-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-managesieve-1.2.6-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-mysql-1.2.6-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-pgsql-1.2.6-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-sieve-1.2.6-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dovecot-plugins-sqlite-1.2.6-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

Dovecot Dovecot 1.2.7

• Dovecot dovecot-1.2.8.tar.gz
  http://dovecot.org/releases/1.2/dovecot-1.2.8.tar.gz