← Database

CVE-2007-6598

MEDIUM CVSS: 6.8 Published: 2008-01-04 Modified: 2026-06-16

Description

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password.

Affected Platforms

Dovecot Dovecot

Weakness Type

CWE-264

References