3.5

CVE-2010-3779

Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.beta2 grants the admin permission to the owner of each mailbox in a non-public namespace, which might allow remote authenticated users to bypass intended access restrictions by changing the ACL of a mailbox, as demonstrated by a symlinked shared mailbox.

Data is provided by the National Vulnerability Database (NVD)
Dovecot ≫ Dovecot Version1.2.0
Dovecot ≫ Dovecot Version1.2.1
Dovecot ≫ Dovecot Version1.2.2
Dovecot ≫ Dovecot Version1.2.3
Dovecot ≫ Dovecot Version1.2.4
Dovecot ≫ Dovecot Version1.2.5
Dovecot ≫ Dovecot Version1.2.6
Dovecot ≫ Dovecot Version1.2.7
Dovecot ≫ Dovecot Version1.2.8
Dovecot ≫ Dovecot Version1.2.9
Dovecot ≫ Dovecot Version1.2.10
Dovecot ≫ Dovecot Version1.2.11
Dovecot ≫ Dovecot Version1.2.12
Dovecot ≫ Dovecot Version1.2.13
Dovecot ≫ Dovecot Version1.2.14
Dovecot ≫ Dovecot Version2.0 Updatebeta1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.3% 0.504
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:P/A:N