CVE-2011-2166

Dovecot 2.0.x (pre-2.0.13) is affected by CVE-2011-2166 (and related CVEs) due to script-login not honoring user/group settings, potentially allowing remote authenticated users to bypass access controls. Severity is moderate (CVSS v2 base 6.5). Affected: Dovecot 2.0.x before 2.0.13; Impact: parti...

CVE-2011-2166

script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script...

CVE-2011-2167

script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script...

CVE-2011-2166

script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script...

CVE-2011-2167

script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script...

PT-2011-3655

Name of the Vulnerable Software and Affected Versions Dovecot versions 2.0.x through 2.0.12 Description The issue concerns a problem where the script-login in Dovecot does not follow the chroot configuration setting. This might allow remote authenticated users to conduct directory traversal attac...

PT-2011-3654

Name of the Vulnerable Software and Affected Versions Dovecot versions 2.0.x through 2.0.12 Description The issue concerns a problem where the script-login in Dovecot does not follow the user and group configuration settings. This might allow remote authenticated users to bypass intended access...

CVE-2011-2167: Improper Limitation of a Pathname to a Restricted Directory

script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script...

CVE-2011-2166: Undefined Security Weakness

script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script...