Test Kennung:	1.3.6.1.4.1.25623.1.0.840583
Kategorie:	Ubuntu Local Security Checks
Titel:	Ubuntu Update for dovecot vulnerabilities USN-1059-1
Zusammenfassung:	Ubuntu Update for Linux kernel vulnerabilities USN-1059-1
Beschreibung:	Summary: Ubuntu Update for Linux kernel vulnerabilities USN-1059-1 Vulnerability Insight: It was discovered that the ACL plugin in Dovecot would incorrectly propagate ACLs to new mailboxes. A remote authenticated user could possibly read new mailboxes that were created with the wrong ACL. (CVE-2010-3304) It was discovered that the ACL plugin in Dovecot would incorrectly merge ACLs in certain circumstances. A remote authenticated user could possibly bypass intended access restrictions and gain access to mailboxes. (CVE-2010-3706, CVE-2010-3707) It was discovered that the ACL plugin in Dovecot would incorrectly grant the admin permission to owners of certain mailboxes. A remote authenticated user could possibly bypass intended access restrictions and gain access to mailboxes. (CVE-2010-3779) It was discovered that Dovecot incorrectly handled the simultaneous disconnect of a large number of sessions. A remote authenticated user could use this flaw to cause Dovecot to crash, resulting in a denial of service. (CVE-2010-3780) Affected Software/OS: dovecot vulnerabilities on Ubuntu 10.04 LTS, Ubuntu 10.10 Solution: Please Install the Updated Packages. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3304 BugTraq ID: 41964 http://www.securityfocus.com/bid/41964 http://www.mandriva.com/security/advisories?name=MDVSA-2010:217 http://www.dovecot.org/list/dovecot-news/2010-July/000163.html http://www.openwall.com/lists/oss-security/2010/09/16/14 http://www.openwall.com/lists/oss-security/2010/09/16/17 http://secunia.com/advisories/43220 SuSE Security Announcement: SUSE-SR:2010:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html http://www.ubuntu.com/usn/USN-1059-1 http://www.vupen.com/english/advisories/2010/2840 http://www.vupen.com/english/advisories/2011/0301 Common Vulnerability Exposure (CVE) ID: CVE-2010-3706 http://www.dovecot.org/list/dovecot/2010-October/053452.html http://www.dovecot.org/list/dovecot/2010-October/053450.html http://www.dovecot.org/list/dovecot/2010-October/053451.html http://marc.info/?l=oss-security&m=128620520732377&w=2 http://marc.info/?l=oss-security&m=128622064325688&w=2 SuSE Security Announcement: SUSE-SR:2010:020 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html http://www.vupen.com/english/advisories/2010/2572 Common Vulnerability Exposure (CVE) ID: CVE-2010-3707 http://www.redhat.com/support/errata/RHSA-2011-0600.html Common Vulnerability Exposure (CVE) ID: CVE-2010-3779 Common Vulnerability Exposure (CVE) ID: CVE-2010-3780
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.