CVE ID:	CVE-2010-3304
Description:	The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configurations, which might allow remote attackers to read mailboxes that have unintended weak ACLs.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3304 41964 http://www.securityfocus.com/bid/41964 43220 http://secunia.com/advisories/43220 ADV-2010-2840 http://www.vupen.com/english/advisories/2010/2840 ADV-2011-0301 http://www.vupen.com/english/advisories/2011/0301 MDVSA-2010:217 http://www.mandriva.com/security/advisories?name=MDVSA-2010:217 SUSE-SR:2010:017 http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html USN-1059-1 http://www.ubuntu.com/usn/USN-1059-1 [dovecot-news] 20100724 v1.2.13 released http://www.dovecot.org/list/dovecot-news/2010-July/000163.html [oss-security] 20100916 CVE-identifier request for Dovecot ACL security bug http://www.openwall.com/lists/oss-security/2010/09/16/14 [oss-security] 20100916 Re: CVE-identifier request for Dovecot ACL security bug http://www.openwall.com/lists/oss-security/2010/09/16/17