Description
Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base_dir directory, and possibly the base_dir directory itself.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dovecot | 1:1.2.8-1 | — |
| Debian 13 | dovecot | 1:1.2.8-1 | — |
| Debian 12 | dovecot | 1:1.2.8-1 | — |
References
- 37443 third-party-advisory
- 60316 vdb-entry
- [oss-security] 20091121 CVE Request - Dovecot - 1.2.8 mailing-list
- [dovecot-news] 20091120 v1.2.8 released mailing-list
- SUSE-SR:2010:001 vendor-advisory
- ADV-2009-3306 vdb-entry
- [oss-security] 20091123 Re: CVE request: v1.2.8 released to fix the 0777 base_dir creation issue mailing-list
- [oss-security] 20091120 CVE request: v1.2.8 released to fix the 0777 base_dir creation issue mailing-list
- 37084 vdb-entry
- MDVSA-2009:306 vendor-advisory
- [oss-security] 20091123 Re: CVE Request - Dovecot - 1.2.8 mailing-list
- dovecot-basedir-privilege-escalation(54363) vdb-entry