Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f2q7-xh76-m34j

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

EPSS

Процентиль: 74%
0.01457
Низкий

Дефекты

CWE-287

Связанные уязвимости

ubuntu
почти 13 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

redhat
около 13 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

nvd
почти 13 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

debian
почти 13 лет назад

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations ...

altlinux
почти 13 лет назад

ALT-PU-2013-1205: package `dovecot` update to version 2.2.9-alt1

EPSS

Процентиль: 74%
0.01457
Низкий

Дефекты

CWE-287