5 matches found
PT-2021-17852
Name of the Vulnerable Software and Affected Versions: courier-authlib versions prior to 0.71.1-2 Description: The Debian courier-authlib package creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password...
Mandriva Linux Security Advisory : courier-authlib (MDVSA-2013:068)
When using the authpgsql module and if the Postgres server goes down, authpgsql will start leaking memory. A packaging flaw was discovered that caused the courier-authlib-devel package to be installed when installing for example maildrop. This update fixes both of these issues. %NASLMINLEVEL 7030...
CVE-2005-3532
authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pamtally, does not call the pamacctmgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled...
CVE-2005-3532
The CVE-2005-3532 issue affects courier-authdaemon (Courier Mail Server) versions 0.37.3 through 0.52.1, where authentication using pam_tally does not invoke pam_acct_mgmt to verify account status. This allows authentication to succeed for accounts that have been disabled. The vulnerability is do...
