dovecot -- ACL plugin bypass vulnerabilities

2008-10-05T00:00:00
ID 75C24C1D-B688-11DD-88FD-001C2514716C
Type freebsd
Reporter FreeBSD
Modified 2008-10-05T00:00:00

Description

Timo Sirainen reports in dovecot 1.1.4 release notes:

ACL plugin fixes: Negative rights were actually treated as positive rights. 'k' right didn't prevent creating parent/child/child mailbox. ACL groups weren't working.