UpHeron
All vulnerabilities

Servers and applications

CVE-2010-3706

plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving the private namespace of a user, which allows remote authenticated users to bypass intended access…

Severity
Medium 5.5
Published
6 Oct 2010
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
2.1% in the next 30 daysHigher than 82% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
CWE-264
Attack
Over the network · Needs a login
Attacker can
Read some data · Change some data
CVSS vector
AV:N/AC:L/Au:S/C:P/I:P/A:N
Sources
NVD

Description

plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving the private namespace of a user, which allows remote authenticated users to bypass intended access restrictions via a request to read or modify a mailbox.

From NVD.

Affected software

SoftwareAffected versions
DovecotServers and applications · cpe:a:dovecot:dovecot
  • Version 2.0.4
  • Version 2.0.3
  • Version 2.0.2
  • Version 2.0.1
All 20 release lines
  • Version 1.2.0
  • Version 1.2.1
  • Version 1.2.2
  • Version 1.2.3
  • Version 1.2.4
  • Version 1.2.5
  • Version 1.2.6
  • Version 1.2.7
  • Version 1.2.8
  • Version 1.2.9
  • Version 1.2.10
  • Version 1.2.11
  • Version 1.2.12
  • Version 1.2.13
  • Version 1.2.14
  • Version 2.0.0
  • Version 2.0.1
  • Version 2.0.2
  • Version 2.0.3
  • Version 2.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2010-3706
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2010-3706