Detections
Analytics
openSUSE 10 Security Update : dovecot (dovecot-5647)
medium Nessus Plugin ID 34320
Synopsis
The remote openSUSE host is missing a security update.Description
When configured with 'mail_extra_groups' dovecot potentially allowed users to read mail boxes of other users. This is not the case in the default configuration of on openSUSE (CVE-2008-1199).By using tab characters in passwords remote attackers could potentially acquire unauthorized access (CVE-2008-1218).
Flaws in caching LDAP data could lead to users getting logged in with the wrong account (CVE-2007-6598).
Solution
Update the affected dovecot packages.Plugin Details
Severity: Medium
ID: 34320
File Name: suse_dovecot-5647.nasl
Version: 1.10
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 10/1/2008
Updated: 1/14/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:novell:opensuse:10.3, cpe:/o:novell:opensuse:10.2, p-cpe:/a:novell:opensuse:dovecot, p-cpe:/a:novell:opensuse:dovecot-devel
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 9/29/2008