[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] rPSA-2007-0074-1 dovecot
- To: security-announce@xxxxxxxxxxxxxxx, update-announce@xxxxxxxxxxxxxxx
- Subject: [Full-disclosure] rPSA-2007-0074-1 dovecot
- From: rPath Update Announcements <announce-noreply@xxxxxxxxx>
- Date: Wed, 18 Apr 2007 12:03:43 -0400
rPath Security Advisory: 2007-0074-1
Published: 2007-04-18
Products: rPath Linux 1
Rating: Informational
Exposure Level Classification:
Local User Deterministic Information Exposure
Updated Versions:
dovecot=/conary.rpath.com@rpl:devel//1/1.0.0-0.1-1
References:
https://issues.rpath.com/browse/RPL-1200
Description:
Previous versions of the dovecot package are vulnerable to a trivial
information exposure in which files outside the user's mail directory
could be opened if the zlib plugin was used.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/