CVE-2011-2166

Dovecot 2.0.x (pre-2.0.13) is affected by CVE-2011-2166 (and related CVEs) due to script-login not honoring user/group settings, potentially allowing remote authenticated users to bypass access controls. Severity is moderate (CVSS v2 base 6.5). Affected: Dovecot 2.0.x before 2.0.13; Impact: parti...

CVE-2011-2167

script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script...

CVE-2011-2167

script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script...