Red Hat Security AdvisoryRHSA-2011:0600
dovecot security and enhancement update
Released 2011-05-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) dovecot-1:2.0.9-2.el6, dovecot-1:2.0.9-2.el6.ppc, dovecot-mysql-1:2.0.9-2.el6 +2
- Red Hat Enterprise Linux Server Optional (v. 6) dovecot-1:2.0.9-2.el6, dovecot-devel-1:2.0.9-2.el6
- Red Hat Enterprise Linux Workstation (v. 6) dovecot-1:2.0.9-2.el6, dovecot-mysql-1:2.0.9-2.el6, dovecot-pgsql-1:2.0.9-2.el6 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) dovecot-1:2.0.9-2.el6, dovecot-devel-1:2.0.9-2.el6
Fixes 2 records
Priority LOW 29
plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the p…
CVSS 2.0MEDIUM 5.5· Network · Low privileges · Interaction — · EPSS 0.02337 · Published 2010-10-06 · Fixed CWE-264
Priority LOW 23
Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.02056 · Published 2010-10-06 · Fixed
