Lucene search

K
ubuntuUbuntuUSN-487-1
HistoryJul 17, 2007 - 12:00 a.m.

Dovecot vulnerability

2007-07-1700:00:00
ubuntu.com
21

6.1 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.4%

Releases

  • Ubuntu 7.04
  • Ubuntu 6.10
  • Ubuntu 6.06

Details

It was discovered that Dovecot, when configured to use non-system-user
spools and compressed folders, would allow directory traversals in
mailbox names. Remote authenticated users could potentially read email
owned by other users.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchdovecot-common< 1.0.rc17-1ubuntu2.1UNKNOWN
Ubuntu6.10noarchdovecot-common< 1.0.rc2-1ubuntu2.2UNKNOWN
Ubuntu6.06noarchdovecot-common< 1.0.beta3-3ubuntu5.5UNKNOWN

6.1 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.4%