Debian Courier-authlib 0.66.4-9

CPE Details

Debian Courier-authlib 0.66.4-9
debian
courier-authlib
0.66.4-9
2021-03-16
12h31 +00:00
2021-05-12
15h45 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:debian:courier-authlib:0.66.4-9:*:*:*:*:*:*:*

Informations

Vendor

debian

Product

courier-authlib

Version

0.66.4-9

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-28374 2021-03-15 03h51 +00:00 The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).
7.5
High