Login Request a demo
Unscored severity · published Oct 6, 2010
CVE-2010-3707
plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL…
–
CVSS
2.3%
EPSS
No
On KEV
Description
plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving more specific entries that occur after less specific entries, which allows remote authenticated users to bypass intended access restrictions via a request to read or modify a mailbox.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Dovecot · Dovecot
1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; +14 more · source: NVD
Affected product
DO
Dovecot
Dovecot
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3707
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3707
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html
marc.info
http://marc.info/?l=oss-security&m=128620520732377&w=2
marc.info
http://marc.info/?l=oss-security&m=128622064325688&w=2
secunia.com
http://secunia.com/advisories/43220
Vendor Advisory
http://www.dovecot.org/list/dovecot/2010-October/053450.html
Vendor Advisory
http://www.dovecot.org/list/dovecot/2010-October/053451.html
More from Dovecot
9.8
CVE-2019-11500
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings
9.1
CVE-2026-27851
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped
8.8
CVE-2022-30550
An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20
8.2
CVE-2026-24031
Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin
7.8
CVE-2019-7524
In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root