CVE-2008-4870

EPSS 0.04%

發布日:2008/11/1修改日:2026/4/28

也稱為:DEBIAN-CVE-2008-4870

描述

dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.

受影響套件(1)

Debian/dovecotfrom 0

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-4870