CVE-2012-3306

Summary (CVE-2012-3306 family in IBM WebSphere Application Server) : Multiple IBM WebSphere bulletins and NASL/OSS feeds reference CVEs affecting WebSphere Application Server components across versions 6.1, 7.0, 8.x (notably 8.5.x) and IBM HTTP Server, with the core issues including: CVE-2012-330...

CVE-2012-3306: Undefined Security Weakness

IBM WebSphere Application Server WAS 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors...

dovecot LDAP+auth cache user login mixup

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password...

DEBIAN-CVE-2007-6598

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password...