CVE-2008-4870

Опубликовано: 01 нояб. 2008

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.

Ссылки

http://secunia.com/advisories/32164
Broken Link
http://secunia.com/advisories/33149
Broken Link
http://secunia.com/advisories/33624
Broken Link
http://security.gentoo.org/glsa/glsa-200812-16.xml
Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/10/29/10
Mailing List
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-0205.html
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=436287
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46323
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10776
Tool Signature
http://secunia.com/advisories/32164
Broken Link
http://secunia.com/advisories/33149
Broken Link
http://secunia.com/advisories/33624
Broken Link
http://security.gentoo.org/glsa/glsa-200812-16.xml
Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/10/29/10
Mailing List
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-0205.html
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=436287
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46323
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10776
Tool Signature

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:dovecot:dovecot:1.0.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.0004

Низкий

2.1 Low

CVSS2

Дефекты

CWE-732

Связанные уязвимости

CVE-2008-4870

redhat

больше 17 лет назад

dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.

CVE-2008-4870

debian

больше 16 лет назад

dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedor ...

GHSA-7hp8-2g4v-fc2h

github

около 3 лет назад

dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.

ELSA-2009-0205

oracle-oval

больше 16 лет назад

ELSA-2009-0205: dovecot security and bug fix update (LOW)

EPSS

Процентиль: 12%

0.0004

Низкий

2.1 Low

CVSS2

Дефекты

CWE-732