Gentoo GLSA 200804-24 Important: DBMail Authentication Vulnerability Alert

Gentoo Linux Security Advisory GLSA 200804-24 https://security.gentoo.org/ Severity: Low Title: DBmail: Data disclosure Date: April 18, 2008 Bugs: #218154 ID: 200804-24

Synopsis ======= A vulnerability in DBMail could allow for passwordless login to any account under certain configurations.
Background ========= DBMail is a mail storage and retrieval daemon that uses SQL databases as its data store. IMAP and POP3 can be used to retrieve mails from the database.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-mail/dbmail < 2.2.9 >= 2.2.9
========== A vulnerability in DBMail's authldap module when used in conjunction with an Active Directory...