CVE-2008-4577
Publication date 15 October 2008
Last updated 24 July 2024
Ubuntu priority
The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| dovecot | ||
Patch details
| Package | Patch details |
|---|---|
| dovecot |
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
7.5 · High
|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | None |
| Availability impact | None |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |