Description
The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions.Novell Bugzilla entry: 435978 SUSE Security Advisories:
- SUSE-SR:2009:004, published Tue, 17 Feb 2009 10:00:00 +0000
- SUSE-SR:2009:004 , published Tue, 17 Feb 2009 10:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| openSUSE 10.3 |
| ZYPP Patch Nr: 5986 SAT Patch Nr: 504 |
| openSUSE 11.0 |
| ZYPP Patch Nr: 5986 SAT Patch Nr: 504 |
| openSUSE 11.0 |
| ZYPP Patch Nr: 5986 SAT Patch Nr: 504 |