CVE-2011-2166

Related Files

Red Hat Security Advisory 2013-0520-02

Posted Feb 21, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-0520-02 - Dovecot is an IMAP server, written with security primarily in mind, for Linux and other UNIX-like systems. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are provided as sub-packages. Two flaws were found in the way some settings were enforced by the script-login functionality of Dovecot. A remote, authenticated user could use these flaws to bypass intended access restrictions or conduct a directory traversal attack by leveraging login scripts.

tags | advisory, remote, imap

systems | linux, redhat, unix

advisories | CVE-2011-2166, CVE-2011-2167, CVE-2011-4318

SHA-256 | cc2d82431b7724dffbd1e1d10167102f8893f413a9eb44dd0dce08dd119b4ef9

Download | Favorite | View