Unrated severityNVD Advisory· Published Nov 1, 2008· Updated Jun 16, 2026
CVE-2008-4870
CVE-2008-4870
Description
dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:dovecot:dovecot:1.0.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dovecot:dovecot:1.0.7:*:*:*:*:*:*:*
- (no CPE)range: = 1.0.7
Patches
Vulnerability mechanics
References
9- security.gentoo.org/glsa/glsa-200812-16.xmlnvdThird Party Advisory
- www.openwall.com/lists/oss-security/2008/10/29/10nvdMailing ListThird Party Advisory
- www.redhat.com/support/errata/RHSA-2009-0205.htmlnvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/46323nvdThird Party AdvisoryVDB Entry
- secunia.com/advisories/32164nvdBroken Link
- secunia.com/advisories/33149nvdBroken Link
- secunia.com/advisories/33624nvdBroken Link
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10776nvdTool Signature
News mentions
0No linked articles in our index yet.