Dovecot 'mail_extra_groups' Insecure Settings Local Unauthorized Access Vulnerability
BID:28092
Info
Dovecot 'mail_extra_groups' Insecure Settings Local Unauthorized Access Vulnerability
| Bugtraq ID: | 28092 |
| Class: | Access Validation Error |
| CVE: |
CVE-2008-1199 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 04 2008 12:00AM |
| Updated: | Apr 13 2015 09:14PM |
| Credit: | Timo Sirainen discovered this issue. |
| Vulnerable: |
Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.10 sparc Ubuntu Ubuntu Linux 6.10 powerpc Ubuntu Ubuntu Linux 6.10 i386 Ubuntu Ubuntu Linux 6.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 Redhat Fedora 7 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Server Gentoo Linux 2007.0 Gentoo Linux Dovecot Dovecot 1.0.10 Dovecot Dovecot 1.0.9 Dovecot Dovecot 1.0.8 Dovecot Dovecot 1.0.7 Dovecot Dovecot 1.0.6 Dovecot Dovecot 1.0.5 Dovecot Dovecot 1.0.4 Dovecot Dovecot 1.0.3 Dovecot Dovecot 0.99.14 Dovecot Dovecot 0.99.13 Dovecot Dovecot 1.0.RC9 Dovecot Dovecot 1.0.RC8 Dovecot Dovecot 1.0.RC7 Dovecot Dovecot 1.0.RC6 Dovecot Dovecot 1.0.RC5 Dovecot Dovecot 1.0.RC4 Dovecot Dovecot 1.0.RC3 Dovecot Dovecot 1.0.RC2 Dovecot Dovecot 1.0.RC15 Dovecot Dovecot 1.0.RC14 Dovecot Dovecot 1.0.RC13 Dovecot Dovecot 1.0.RC12 Dovecot Dovecot 1.0.RC11 Dovecot Dovecot 1.0.RC10 Dovecot Dovecot 1.0.Beta3 Dovecot Dovecot 1.0.Beta2 Dovecot Dovecot 1.0 rc29 Dovecot Dovecot 1.0 Rc1 Dovecot Dovecot 1.0 Beta8 Dovecot Dovecot 1.0 Beta7 Dovecot Dovecot 1.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: |
Dovecot Dovecot 1.0.11 |
Discussion
Dovecot 'mail_extra_groups' Insecure Settings Local Unauthorized Access Vulnerability
Dovecot is prone to a vulnerability that can result in unauthorized access to arbitrary data.
This occurs when the 'mail_extra_groups' setting is enabled.
Attackers can leverage this issue to write or delete certain files or to harvest data that may aid in further attacks.
Dovecot 0.99.10.6 through 1.0.10 are vulnerable.
Dovecot is prone to a vulnerability that can result in unauthorized access to arbitrary data.
This occurs when the 'mail_extra_groups' setting is enabled.
Attackers can leverage this issue to write or delete certain files or to harvest data that may aid in further attacks.
Dovecot 0.99.10.6 through 1.0.10 are vulnerable.
Exploit / POC
Dovecot 'mail_extra_groups' Insecure Settings Local Unauthorized Access Vulnerability
Attackers can exploit this issue creating symbolic links on the affected computer.
Attackers can exploit this issue creating symbolic links on the affected computer.
Solution / Fix
Dovecot 'mail_extra_groups' Insecure Settings Local Unauthorized Access Vulnerability
Solution:
The vendor released Dovecot 1.0.11 to address this issue. Please see the references for more information.
Dovecot Dovecot 1.0.RC11
Dovecot Dovecot 1.0.RC4
Dovecot Dovecot 1.0 Beta7
Dovecot Dovecot 1.0.RC12
Dovecot Dovecot 1.0.RC13
Dovecot Dovecot 1.0.RC3
Dovecot Dovecot 1.0.RC9
Dovecot Dovecot 1.0.RC8
Dovecot Dovecot 1.0.Beta2
Dovecot Dovecot 1.0
Dovecot Dovecot 1.0.RC15
Dovecot Dovecot 1.0.RC2
Dovecot Dovecot 1.0.RC14
Dovecot Dovecot 1.0 Rc1
Dovecot Dovecot 1.0.Beta3
Dovecot Dovecot 1.0.RC10
Dovecot Dovecot 1.0 Beta8
Dovecot Dovecot 1.0.RC5
Dovecot Dovecot 1.0.RC7
Dovecot Dovecot 1.0.RC6
Dovecot Dovecot 0.99.13
Dovecot Dovecot 0.99.14
Dovecot Dovecot 1.0.10
Dovecot Dovecot 1.0.3
Dovecot Dovecot 1.0.4
Dovecot Dovecot 1.0.5
Dovecot Dovecot 1.0.6
Dovecot Dovecot 1.0.7
Dovecot Dovecot 1.0.8
Dovecot Dovecot 1.0.9
Solution:
The vendor released Dovecot 1.0.11 to address this issue. Please see the references for more information.
Dovecot Dovecot 1.0.RC11
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC4
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0 Beta7
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC12
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC13
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC3
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC9
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC8
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.Beta2
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC15
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC2
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC14
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0 Rc1
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.Beta3
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC10
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0 Beta8
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC5
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC7
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.RC6
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 0.99.13
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 0.99.14
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.10
-
Dovecot dovecot-1.0.10.mail_priv_groups.diff
http://dovecot.org/patches/1.0/dovecot-1.0.10.mail_priv_groups.diff -
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.3
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.4
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.5
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.6
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.7
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.8
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
Dovecot Dovecot 1.0.9
-
Dovecot dovecot-1.0.11.tar.gz
http://dovecot.org/releases/1.0/dovecot-1.0.11.tar.gz
References
Dovecot 'mail_extra_groups' Insecure Settings Local Unauthorized Access Vulnerability
References:
References:
- Vendor Homepage (Dovecot)
- Dovecot mail_extra_groups setting is often used insecurely (Timo Sirainen
- [Dovecot-news] v1.0.11 released (Dovecot)
- RHSA-2008:0297-6 dovecot security and bug fix update (Red Hat)