← Database

CVE-2008-4577

HIGH CVSS: 7.5 Published: 2008-10-15 Modified: 2026-06-16

Description

The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions.

Affected Platforms

Opensuse OpensuseDovecot DovecotCanonical Ubuntu LinuxFedoraproject Fedora

Weakness Type

CWE-863

References