The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.beta2 grants the admin permission to the owner of each mailbox in a non-public namespace, which might allow remote authenticated users to bypass intended access restrictions by changing the ACL of a mailbox, as demonstrated by a symlinked shared mailbox.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dovecot | Jul 30, 2024 | Oct 6, 2010 |
| Gentoo Linux | — | Upgrade net-mail/dovecot. | Oct 30, 2017 | Oct 6, 2010 |
| Ubuntu | — | Upgrade dovecot-common | Nov 8, 2024 | Oct 6, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub