Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f2q7-xh76-m34j

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

EPSS

Процентиль: 71%
0.01457
Низкий

Дефекты

CWE-287

Связанные уязвимости

ubuntu
больше 12 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

redhat
почти 13 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

nvd
больше 12 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

debian
больше 12 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations ...

EPSS

Процентиль: 71%
0.01457
Низкий

Дефекты

CWE-287