CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1199

Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 10.3%

CVSS Severity

CVSS v2 Score 4.4

References

Products affected by CVE-2008-1199

Dovecot » Dovecot » Version: 0.99.13

cpe:2.3:a:dovecot:dovecot:0.99.13
Dovecot » Dovecot » Version: 0.99.14

cpe:2.3:a:dovecot:dovecot:0.99.14
Dovecot » Dovecot » Version: 1.0

cpe:2.3:a:dovecot:dovecot:1.0
Dovecot » Dovecot » Version: 1.0.10

cpe:2.3:a:dovecot:dovecot:1.0.10
Dovecot » Dovecot » Version: 1.0.2

cpe:2.3:a:dovecot:dovecot:1.0.2
Dovecot » Dovecot » Version: 1.0.3

cpe:2.3:a:dovecot:dovecot:1.0.3
Dovecot » Dovecot » Version: 1.0.4

cpe:2.3:a:dovecot:dovecot:1.0.4
Dovecot » Dovecot » Version: 1.0.5

cpe:2.3:a:dovecot:dovecot:1.0.5
Dovecot » Dovecot » Version: 1.0.6

cpe:2.3:a:dovecot:dovecot:1.0.6
Dovecot » Dovecot » Version: 1.0.7

cpe:2.3:a:dovecot:dovecot:1.0.7
Dovecot » Dovecot » Version: 1.0.8

cpe:2.3:a:dovecot:dovecot:1.0.8
Dovecot » Dovecot » Version: 1.0.9

cpe:2.3:a:dovecot:dovecot:1.0.9
Dovecot » Dovecot » Version: 1.0.beta2

cpe:2.3:a:dovecot:dovecot:1.0.beta2
Dovecot » Dovecot » Version: 1.0.beta3

cpe:2.3:a:dovecot:dovecot:1.0.beta3
Dovecot » Dovecot » Version: 1.0.beta7

cpe:2.3:a:dovecot:dovecot:1.0.beta7
Dovecot » Dovecot » Version: 1.0.beta8

cpe:2.3:a:dovecot:dovecot:1.0.beta8
Dovecot » Dovecot » Version: 1.0.rc1

cpe:2.3:a:dovecot:dovecot:1.0.rc1
Dovecot » Dovecot » Version: 1.0.rc10

cpe:2.3:a:dovecot:dovecot:1.0.rc10
Dovecot » Dovecot » Version: 1.0.rc11

cpe:2.3:a:dovecot:dovecot:1.0.rc11
Dovecot » Dovecot » Version: 1.0.rc12

cpe:2.3:a:dovecot:dovecot:1.0.rc12
Dovecot » Dovecot » Version: 1.0.rc13

cpe:2.3:a:dovecot:dovecot:1.0.rc13
Dovecot » Dovecot » Version: 1.0.rc14

cpe:2.3:a:dovecot:dovecot:1.0.rc14
Dovecot » Dovecot » Version: 1.0.rc15

cpe:2.3:a:dovecot:dovecot:1.0.rc15
Dovecot » Dovecot » Version: 1.0.rc2

cpe:2.3:a:dovecot:dovecot:1.0.rc2
Dovecot » Dovecot » Version: 1.0.rc3

cpe:2.3:a:dovecot:dovecot:1.0.rc3
Dovecot » Dovecot » Version: 1.0.rc4

cpe:2.3:a:dovecot:dovecot:1.0.rc4
Dovecot » Dovecot » Version: 1.0.rc5

cpe:2.3:a:dovecot:dovecot:1.0.rc5
Dovecot » Dovecot » Version: 1.0.rc6

cpe:2.3:a:dovecot:dovecot:1.0.rc6
Dovecot » Dovecot » Version: 1.0.rc7

cpe:2.3:a:dovecot:dovecot:1.0.rc7
Dovecot » Dovecot » Version: 1.0.rc8

cpe:2.3:a:dovecot:dovecot:1.0.rc8
Dovecot » Dovecot » Version: 1.0.rc9

cpe:2.3:a:dovecot:dovecot:1.0.rc9
Dovecot » Dovecot » Version: 1.0_rc29

cpe:2.3:a:dovecot:dovecot:1.0_rc29

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1199

Products

Pricing

Contact Us