CVE-2007-6598
EPSS 2.5%dovecot
發布日:2008/1/4修改日:2026/3/9
描述
Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password.
受影響套件(2)
- Debian/dovecotfrom 0, < 1:1.0.10-1
- Debian/dovecotfrom 0, < 1.0.rc15-2etch3