Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo GLSA-200812-16 Normal: Dovecot Denial of Service Threats

gentoo
Calendar Grey December 15, 2008
Scroller Gentoo
Several security flaws in Dovecot running on Gentoo Linux may result in Denial of Service incidents and potential breaches of security protocols.
Multiple vulnerabilities were found in the Dovecot mailserver.

Summary

Gentoo Linux Security Advisory GLSA 200812-16 https://security.gentoo.org/ Severity: Normal Title: Dovecot: Multiple vulnerabilities Date: December 14, 2008 Bugs: #240409, #244962, #245316 ID: 200812-16

Synopsis ======= Multiple vulnerabilities were found in the Dovecot mailserver.
Background ========= Dovecot is an IMAP and POP3 server written with security primarily in mind.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-mail/dovecot < 1.1.7-r1 >= 1.1.7-r1
========== Several vulnerabilities were found in Dovecot:
* The "k" right in the acl_plugin does not work as expected (CVE-2008-4577, CVE-2008-4578)
* The dovecot.conf is world-readable, providing ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service security issue gentoo mail server dovecot normal severity

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service security issue gentoo mail server dovecot normal severity

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround