CVEvulnerability

CVE-2010-3304

6.4 MEDIUM Published 2010-09-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-09-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-264

Description

The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configurations, which might allow remote attackers to read mailboxes that have unintended weak ACLs.

Affected configurations

• dovecot dovecot 1.2.0 • dovecot dovecot 1.2.1 • dovecot dovecot 1.2.2 • dovecot dovecot 1.2.3 • dovecot dovecot 1.2.4 • dovecot dovecot 1.2.5 • dovecot dovecot 1.2.6 • dovecot dovecot 1.2.7 • dovecot dovecot 1.2.8 • dovecot dovecot 1.2.9 • dovecot dovecot 1.2.10 • dovecot dovecot 1.2.11 • dovecot dovecot 1.2.12

Related

Weakness · not in database (1)

References