Vulnerability in Dovecot

CVE-2008-4578

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes.

EPSS: 0.017 (74.5th percentile) — read the EPSS interpretation.

Affected products

  • Dovecot — versions 0.99.13, 0.99.14, 1.0
  • N/a — versions n/a

Weakness classification (CWE)

References