Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: GLSA-200704-18 High: Remote Code Execution In Courier-IMAP

gentoo
Calendar Grey April 22, 2007
Scroller Gentoo
The Gentoo Security Notice GLSA 202303-09 alerts users about a critical vulnerability found in Dovecot that allows for remote code execution.
A vulnerability has been discovered in Courier-IMAP allowing for remote code execution with root privileges.

Summary

Gentoo Linux Security Advisory GLSA 200704-18 https://security.gentoo.org/ Severity: High Title: Courier-IMAP: Remote execution of arbitrary code Date: April 22, 2007 Bugs: #168196 ID: 200704-18

Synopsis ======= A vulnerability has been discovered in Courier-IMAP allowing for remote code execution with root privileges.
Background ========= Courier-IMAP is an IMAP server which is part of the Courier mail system. It provides access only to maildirs.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-mail/courier-imap < 4.0.6-r2 >= 4.0.6-r2
========== CJ Kucera has discovered that some Courier-IMAP scripts don't properly handle the XMAILDIR variable, allowing ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo high severity security issue code execution remote code execution Courier-IMAP

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo high severity security issue code execution remote code execution Courier-IMAP

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround