Debian Courier-authlib 0.71.0-1

CPE Details

Debian Courier-authlib 0.71.0-1
debian
courier-authlib
0.71.0-1
2021-03-16
12h31 +00:00
2021-05-12
15h45 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:debian:courier-authlib:0.71.0-1:*:*:*:*:*:*:*

Informations

Vendor

debian

Product

courier-authlib

Version

0.71.0-1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-28374 2021-03-15 03h51 +00:00 The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).
7.5
Haute