SecuritySpace - CVE-2013-6171

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-6171

Description: checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

Test IDs: 1.3.6.1.4.1.25623.1.0.114168

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-6171
http://cpanel.net/tsr-2013-0010-full-disclosure/
http://www.dovecot.org/list/dovecot-news/2013-November/000264.html
http://secunia.com/advisories/54808
https://usn.ubuntu.com/3556-2/

CVE ID:	CVE-2013-6171
Description:	checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.
Test IDs:	1.3.6.1.4.1.25623.1.0.114168
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6171 http://cpanel.net/tsr-2013-0010-full-disclosure/ http://www.dovecot.org/list/dovecot-news/2013-November/000264.html http://secunia.com/advisories/54808 https://usn.ubuntu.com/3556-2/