CVE-2008-4578

Published: Oct 15, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes.

Affected (57)

Products: Dovecot: Dovecot

Dovecot

1 product

Dovecot

Configuration A

57 vulnerable

Vulnerable Software	Affected Versions
Dovecot Dovecot	Up to 1.1.3
Dovecot Dovecot	Version 0.99.13
Dovecot Dovecot	Version 0.99.14
Dovecot Dovecot	Version 1.0.10
Dovecot Dovecot	Version 1.0.12
Dovecot Dovecot	Version 1.0.2
Dovecot Dovecot	Version 1.0.3
Dovecot Dovecot	Version 1.0.4
Dovecot Dovecot	Version 1.0.5
Dovecot Dovecot	Version 1.0.6
Dovecot Dovecot	Version 1.0.7
Dovecot Dovecot	Version 1.0.8
Dovecot Dovecot	Version 1.0.9
Dovecot Dovecot	Version 1.0.beta1
Dovecot Dovecot	Version 1.0.beta2
Dovecot Dovecot	Version 1.0.beta3
Dovecot Dovecot	Version 1.0.beta4
Dovecot Dovecot	Version 1.0.beta5
Dovecot Dovecot	Version 1.0.beta6
Dovecot Dovecot	Version 1.0.beta7
Dovecot Dovecot	Version 1.0.beta8
Dovecot Dovecot	Version 1.0.beta9
Dovecot Dovecot	Version 1.0.rc10
Dovecot Dovecot	Version 1.0.rc11
Dovecot Dovecot	Version 1.0.rc12
Dovecot Dovecot	Version 1.0.rc13
Dovecot Dovecot	Version 1.0.rc14
Dovecot Dovecot	Version 1.0.rc15
Dovecot Dovecot	Version 1.0.rc16
Dovecot Dovecot	Version 1.0.rc17
Dovecot Dovecot	Version 1.0.rc18
Dovecot Dovecot	Version 1.0.rc19
Dovecot Dovecot	Version 1.0.rc1
Dovecot Dovecot	Version 1.0.rc20
Dovecot Dovecot	Version 1.0.rc21
Dovecot Dovecot	Version 1.0.rc22
Dovecot Dovecot	Version 1.0.rc23
Dovecot Dovecot	Version 1.0.rc24
Dovecot Dovecot	Version 1.0.rc25
Dovecot Dovecot	Version 1.0.rc26
Dovecot Dovecot	Version 1.0.rc27
Dovecot Dovecot	Version 1.0.rc28
Dovecot Dovecot	Version 1.0.rc2
Dovecot Dovecot	Version 1.0.rc3
Dovecot Dovecot	Version 1.0.rc4
Dovecot Dovecot	Version 1.0.rc5
Dovecot Dovecot	Version 1.0.rc6
Dovecot Dovecot	Version 1.0.rc7
Dovecot Dovecot	Version 1.0.rc8
Dovecot Dovecot	Version 1.0.rc9
Dovecot Dovecot	Version 1.0
Dovecot Dovecot	Version 1.0_rc29
Dovecot Dovecot	Version 1.1.0
Dovecot Dovecot	Version 1.1.1
Dovecot Dovecot	Version 1.1.2
Dovecot Dovecot	Version 1.1
Dovecot Dovecot	Version 1.1 rc2