Vulnerability Bulletins |
DSA-4385 dovecot - security update |
|
| Affected software | Debian |
|
halfdog discovered an authentication bypass vulnerability in the Dovecotemail server. Under some configurations Dovecot mistakenly trusts theusername provided via authentication instead of failing. If there is noadditional password verification, this allows the attacker to login asanyone else in the system. Only installations using: More info: https://www.debian.org/security/2019/dsa-4385 |
|