Medium severity · published Nov 24, 2009
CVE-2009-3897
Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by…
5.5
CVSS
0.4%
EPSS
No
On KEV
Description
Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base_dir directory, and possibly the base_dir directory itself.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Dovecot · Dovecot
1.2.0 before 1.2.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3897
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3897
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html
Mailing List
http://marc.info/?l=oss-security&m=125871729029145&w=2
Mailing List
http://marc.info/?l=oss-security&m=125881481222441&w=2
Mailing List
http://marc.info/?l=oss-security&m=125900267208712&w=2
Mailing List
http://marc.info/?l=oss-security&m=125900271508796&w=2
Broken Link
http://secunia.com/advisories/37443
More from Dovecot
9.8
CVE-2019-11500
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings
9.1
CVE-2026-27851
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped
8.8
CVE-2022-30550
An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20
8.2
CVE-2026-24031
Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin
7.8
CVE-2019-7524
In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root