dovecot privilege escalation
Published:		16.08.2007
Source:		BUGTRAQ
SecurityVulns ID:		8060
Type:		local
Level:		2/10
Description:		User can save message flags without having permissions.

Affected:		DOVECOT : Dovecot 1.0
CVE:		CVE-2007-4211 (The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a (1) COPY or (2) APPEND command.)

Original document

RPATH, rPSA-2007-0161-1 dovecot (16.08.2007)

Discuss:

Read or add your comments to this news (0 comments)