Dovecot 'base_dir' Insecure Permissions Security Bypass Vulnerability

This host has Dovecot installed and is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: gbdovecotbasedirsecbypassvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Description: Dovecot 'basedir' Insecure Permissions Security Bypass Vulnerability Authors: Antu Sanadi Copyright:...

Dovecot 'base_dir' Insecure Permissions Security Bypass Vulnerability

Dovecot is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ MDVSA-2009:306 ] dovecot

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:306 http://www.mandriva.com/security/ Package : dovecot Date : November 29, 2009 Affected: 2010.0 Problem Description: A vulnerability was discovered and corrected in dovecot: Dovecot 1.2.x before 1.2.8 sets...

Dovecot weak permissions

Weak permissions during installation...

Directory traversal

Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the basedir directory, and possibly the basedir directory...

CVE-2009-3897

Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the basedir directory, and possibly the basedir directory...

CVE-2009-3897

Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the basedir directory, and possibly the basedir directory...

CVE-2009-3897

Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the basedir directory, and possibly the basedir directory...

DEBIAN-CVE-2009-3897

Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the basedir directory, and possibly the basedir directory...

CVE-2009-3897

Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the basedir directory, and possibly the basedir directory...

CVE-2009-3897

CVE-2009-3897 affects Dovecot 1.2.x before 1.2.8, where during installation the base_dir-related directories (and possibly the base_dir itself) are created with mode 0777. This permits a local attacker to access or replace the authentication socket and potentially access arbitrary user accounts. ...

CVE-2009-3897

Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the basedir directory, and possibly the basedir directory...

PT-2009-6119 · Dovecot · Dovecot

Name of the Vulnerable Software and Affected Versions: Dovecot versions 1.2.x through 1.2.7 Description: The issue allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base dir directory, and possibly the base dir directory...

Dovecot不安全base_dir权限漏洞

BUGTRAQ ID: 37084 Dovecot是Linux/UNIX类系统平台上的开源IMAP和POP3服务器。 Dovecot默认将basedir目录的权限设置为0777，本地用户可以替换Dovecot的认证套接字以其他用户的身份登录。 Dovecot 1.2.x 厂商补丁： Dovecot ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.dovecot.org/list/dovecot-news/2009-November/000143.html...

dovecot -- Insecure directory permissions

Dovecot author reports: Dovecot v1.2.x had been creating basedir and its parents if necessary with 0777 permissions. The basedir's permissions get changed to 0755 automatically at startup, but you may need to chmod the parent directories manually...

Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities

Binary data 800795.prm...

Apple Plugs 58 Holes in Monster Mac OS X Update

Apple has dropped another mega-patch to cover a total of 58 documented vulnerabilities affecting the Mac OS X ecosystem. The majority of the flaws could allow a remote attacker to gain complete control of an unpatched system, meaning that this update carries an “extremely critical rating.” It...

Mac OS X 10.6.x < 10.6.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.2. Mac OS X 10.6.2 contains security fixes for the following products : - Adaptive Firewall - Apache - Apache Portable Runtime - Certificate Assistant - CoreMedia - CUPS - Dovecot - fetchmail - file - FTP Server - Help...

openSUSE Security Update : dovecot (dovecot-1366)

This update of dovecot fixes two buffer overflows in the sieve plug-in CVE-2009-2632, CVE-2009-3235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-1366. The text description of this...

openSUSE 10 Security Update : dovecot (dovecot-6539)

This update of dovecot fixes two buffer overflows in the sieve plug-in CVE-2009-2632, CVE-2009-3235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-6539. The text description of this...