Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dovecot script-login配置错误漏洞
Vulnerability Description
Dovecot是一款开源的基于类Linux/UNIX系统的IMAP和POP3邮件服务器。 Dovecot 2.0.13之前的2.0.x版本中的script-login没有遵循用户和组的配置设置。远程认证用户可以利用脚本绕过预设的访问限制。
CVSS Information
N/A
Vulnerability Type
N/A