6.5
CVSSv2

CVE-2011-2166

Published: 24/05/2011 Updated: 29/08/2017
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

script-login in Dovecot 2.0.x prior to 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script.

Vulnerable Product Search on Vulmon Subscribe to Product

dovecot dovecot 2.0.9

dovecot dovecot 2.0.4

dovecot dovecot 2.0.7

dovecot dovecot 2.0.8

dovecot dovecot 2.0.1

dovecot dovecot 2.0.12

dovecot dovecot 2.0.10

dovecot dovecot 2.0.5

dovecot dovecot 2.0.2

dovecot dovecot 2.0.6

dovecot dovecot 2.0.11

dovecot dovecot 2.0.3

dovecot dovecot 2.0.0

Vendor Advisories

Synopsis Low: dovecot security and bug fix update Type/Severity Security Advisory: Low Topic Updated dovecot packages that fix three security issues and one bug are nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having lowsecurity impact Common Vulne ...