CVE-2007-6598

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote…

published January 4, 2008

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01959 · 80.0th percentile
Published
2008-01-04T02:00Z
EPSS history
Timeline
  • 04 JAN 02:00Z
    Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote…
    cvelistv5