A vulnerability has been identified in Dovecot, which could be exploited by local attackers to bypass security restrictions. This issue is caused due to insecure permissions (777) being set on the "base_dir" directory and its parents, which could allow malicious users e.g. to replace auth sockets and log in as other users.

Affected Products

Dovecot versions 1.2.0 through 1.2.7

Solution

Upgrade to Dovecot version 1.2.8 and modify permissions of the parent directories manually :
http://dovecot.org/releases/1.2/dovecot-1.2.8.tar.gz
http://dovecot.org/releases/1.2/dovecot-1.2.8.tar.gz.sig

References

http://www.vupen.com/english/advisories/2009/3306
http://www.dovecot.org/list/dovecot-news/2009-November/000143.html

Credits

Vulnerability reported by the vendor.

Changelog

2009-11-23 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.