CVE-2008-4870
dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.
Date published : 2008-10-31
- Next story CVE-2008-3867
- Previous story CVE-2007-6021
Recent Posts
- CVE-2024-0055
- CVE-2024-0054
- CVE-2024-0173
- CVE-2024-0163
- CVE-2024-0162
- CVE-2024-0161
- CVE-2024-0154
- CVE-2024-0053
- CVE-2024-0052
- CVE-2024-0051
- CVE-2024-0050
- CVE-2024-0049
- CVE-2024-0048
- CVE-2024-0047
- CVE-2024-0046
- CVE-2024-0045
- CVE-2024-0044
- CVE-2024-0039
- CVE-2024-0156
- CVE-2024-0155
- CVE-2024-0068
- CVE-2024-0170
- CVE-2024-0169
- CVE-2024-0168
- CVE-2024-0167
- CVE-2024-0166
- CVE-2024-0165
- CVE-2024-0164
- CVE-2024-0187
- CVE-2024-0057
Categories
Latest CWE
Common Weakness Enumeration, Software Assurance strategic initiative sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.