Information disclosure in Apple Mac OS X Server

CVE-2010-4011

Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage memory for user names, which allows remote authenticated users to read the private e-mail of other persons in opportunistic circumstances via standard e-mail clients accessing a user's own mailbox, related to a "memory aliasing issue."

Vulnerability class: Information Disclosure

EPSS: 0.009 (55.7th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x_server — versions 10.6.5
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)