{"api_version":"1","generated_at":"2026-07-24T20:42:11+00:00","cve":"CVE-2009-3897","urls":{"html":"https://cve.report/CVE-2009-3897","api":"https://cve.report/api/cve/CVE-2009-3897.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-3897","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-3897"},"summary":{"title":"CVE-2009-3897","description":"Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base_dir directory, and possibly the base_dir directory itself.","state":"PUBLISHED","assigner":"redhat","published_at":"2009-11-24 17:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-732","n/a"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"5.5","severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.6","severity":"","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://marc.info/?l=oss-security&m=125881481222441&w=2","name":"http://marc.info/?l=oss-security&m=125881481222441&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"title":"'[oss-security] CVE Request - Dovecot - 1.2.8' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:306","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:306","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"],"title":"Support / Security / Advisories /  / MDVSA-2009:306 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=oss-security&m=125871729029145&w=2","name":"http://marc.info/?l=oss-security&m=125871729029145&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"title":"'[oss-security] CVE request: v1.2.8 released to fix the 0777 base_dir creation issue' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/37443","name":"http://secunia.com/advisories/37443","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"],"title":"Dovecot Insecure Directory Permissions Security Issue - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=oss-security&m=125900271508796&w=2","name":"http://marc.info/?l=oss-security&m=125900271508796&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"title":"'Re: [oss-security] CVE Request - Dovecot - 1.2.8' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.dovecot.org/list/dovecot-news/2009-November/000143.html","name":"http://www.dovecot.org/list/dovecot-news/2009-November/000143.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"],"title":"[Dovecot-news] v1.2.8 released","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","name":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"title":"[security-announce] SUSE Security Summary Report: SUSE-SR:2010:001","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2009/3306","name":"http://www.vupen.com/english/advisories/2009/3306","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Permissions Required","Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=oss-security&m=125900267208712&w=2","name":"http://marc.info/?l=oss-security&m=125900267208712&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"title":"'Re: [oss-security] CVE request: v1.2.8 released to fix the 0777' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54363","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54363","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/60316","name":"http://www.osvdb.org/60316","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/37084","name":"http://www.securityfocus.com/bid/37084","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"],"title":"Dovecot Insecure 'base_dir' Permissions Local Privilege Escalation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3897","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3897","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"3897","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dovecot","cpe5":"dovecot","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T06:45:50.108Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"37443","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/37443"},{"name":"60316","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/60316"},{"name":"[oss-security] 20091121 CVE Request - Dovecot - 1.2.8","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://marc.info/?l=oss-security&m=125881481222441&w=2"},{"name":"[dovecot-news] 20091120 v1.2.8 released","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.dovecot.org/list/dovecot-news/2009-November/000143.html"},{"name":"SUSE-SR:2010:001","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html"},{"name":"ADV-2009-3306","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/3306"},{"name":"[oss-security] 20091123 Re: CVE request: v1.2.8 released to fix the 0777 base_dir creation issue","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://marc.info/?l=oss-security&m=125900267208712&w=2"},{"name":"[oss-security] 20091120 CVE request: v1.2.8 released to fix the 0777 base_dir creation issue","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://marc.info/?l=oss-security&m=125871729029145&w=2"},{"name":"37084","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/37084"},{"name":"MDVSA-2009:306","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:306"},{"name":"[oss-security] 20091123 Re: CVE Request - Dovecot - 1.2.8","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://marc.info/?l=oss-security&m=125900271508796&w=2"},{"name":"dovecot-basedir-privilege-escalation(54363)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54363"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-11-20T00:00:00.000Z","descriptions":[{"lang":"en","value":"Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base_dir directory, and possibly the base_dir directory itself."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"37443","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/37443"},{"name":"60316","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/60316"},{"name":"[oss-security] 20091121 CVE Request - Dovecot - 1.2.8","tags":["mailing-list","x_refsource_MLIST"],"url":"http://marc.info/?l=oss-security&m=125881481222441&w=2"},{"name":"[dovecot-news] 20091120 v1.2.8 released","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.dovecot.org/list/dovecot-news/2009-November/000143.html"},{"name":"SUSE-SR:2010:001","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html"},{"name":"ADV-2009-3306","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/3306"},{"name":"[oss-security] 20091123 Re: CVE request: v1.2.8 released to fix the 0777 base_dir creation issue","tags":["mailing-list","x_refsource_MLIST"],"url":"http://marc.info/?l=oss-security&m=125900267208712&w=2"},{"name":"[oss-security] 20091120 CVE request: v1.2.8 released to fix the 0777 base_dir creation issue","tags":["mailing-list","x_refsource_MLIST"],"url":"http://marc.info/?l=oss-security&m=125871729029145&w=2"},{"name":"37084","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/37084"},{"name":"MDVSA-2009:306","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:306"},{"name":"[oss-security] 20091123 Re: CVE Request - Dovecot - 1.2.8","tags":["mailing-list","x_refsource_MLIST"],"url":"http://marc.info/?l=oss-security&m=125900271508796&w=2"},{"name":"dovecot-basedir-privilege-escalation(54363)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54363"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2009-3897","datePublished":"2009-11-24T17:00:00.000Z","dateReserved":"2009-11-05T00:00:00.000Z","dateUpdated":"2024-08-07T06:45:50.108Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-11-24 17:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-732","n/a"],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dovecot:dovecot:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.2.8","matchCriteriaId":"A697E475-79C0-45FD-9529-022CBC15921D"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"3897","Ordinal":"1","Title":"CVE-2009-3897","CVE":"CVE-2009-3897","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"3897","Ordinal":"1","NoteData":"Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base_dir directory, and possibly the base_dir directory itself.","Type":"Description","Title":"CVE-2009-3897"},{"CveYear":"2009","CveId":"3897","Ordinal":"2","NoteData":"2009-11-24","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"3897","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}