From ea8549354e9442e5772a8d0b8d8abffd4d3ad619 Mon Sep 17 00:00:00 2001 From: Wesley Shields Date: Thu, 10 Dec 2009 15:27:42 +0000 Subject: - Document dovecot insecure directory permissions --- security/vuxml/vuln.xml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 9545f35a2c6d..5d3c0815793e 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -35,6 +35,36 @@ Note: Please add new entries to the beginning of this file. --> + + dovecot -- Insecure directory permissions + + + dovecot + 1.2.8 + + + + +

Dovecot author reports:

+
Dovecot v1.2.x had been creating base_dir (and its parents if + necessary) with 0777 permissions. The base_dir's permissions get + changed to 0755 automatically at startup, but you may need to + chmod the parent directories manually.
+

+ + + + CVE-2009-3897 + 37084 + http://secunia.com/advisories/37443 + + + 2009-11-20 + 2009-12-10 + + + linux-flashplugin -- multiple vulnerabilities -- cgit v1.2.3