Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Ubuntu 12.04: USN-1310-1 Important: Dovecot Security Vulnerability

ubuntu
Calendar Grey December 8, 2011
Scroller Ubuntu
Ubuntu 12.04 is susceptible to a vulnerability in Dovecot, which may permit information leaks due to potential man-in-the-middle exploitation.
Dovecot could be made to expose sensitive information over the network.

Summary

Dovecot could be made to expose sensitive information over the network.

Software Description:

- dovecot: IMAP and POP3 email server

Details:

It was discovered that Dovecot incorrectly validated certificate hostnames

when being used as a POP3 and IMAP proxy. If a remote attacker were able to

perform a man-in-the-middle attack, this flaw could be exploited to view

sensitive information.

Topics%20covered

Topics Covered

security advisory critical information exposure ubuntu man-in-the-middle dovecot

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  dovecot-common                  1:2.0.13-1ubuntu3.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1295-1

CVE-2011-4318

Severity
important
Lowest
Low
Medium
High
Critical

December 08, 2011

Topics%20covered

Topics Covered

security advisory critical information exposure ubuntu man-in-the-middle dovecot

Package Information

https://launchpad.net/ubuntu/+source/dovecot/1:2.0.13-1ubuntu3.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.