Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f2q7-xh76-m34j

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

EPSS

Процентиль: 47%
0.00245
Низкий

Дефекты

CWE-287

Связанные уязвимости

ubuntu
около 12 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

redhat
больше 12 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

nvd
около 12 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

debian
около 12 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations ...

EPSS

Процентиль: 47%
0.00245
Низкий

Дефекты

CWE-287