CVE ID:	CVE-2010-3707
Description:	plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving more specific entries that occur after less specific entries, which allows remote authenticated users to bypass intended access restrictions via a request to read or modify a mailbox.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3707 43220 http://secunia.com/advisories/43220 ADV-2010-2572 http://www.vupen.com/english/advisories/2010/2572 ADV-2010-2840 http://www.vupen.com/english/advisories/2010/2840 ADV-2011-0301 http://www.vupen.com/english/advisories/2011/0301 MDVSA-2010:217 http://www.mandriva.com/security/advisories?name=MDVSA-2010:217 RHSA-2011:0600 http://www.redhat.com/support/errata/RHSA-2011-0600.html SUSE-SR:2010:020 http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html USN-1059-1 http://www.ubuntu.com/usn/USN-1059-1 [dovecot] 20101002 ACL handling bugs in v1.2.8+ and v2.0 http://www.dovecot.org/list/dovecot/2010-October/053452.html [dovecot] 20101002 v1.2.15 released http://www.dovecot.org/list/dovecot/2010-October/053450.html [dovecot] 20101002 v2.0.5 released http://www.dovecot.org/list/dovecot/2010-October/053451.html [oss-security] 20101004 CVE Request: more dovecot ACL issues http://marc.info/?l=oss-security&m=128620520732377&w=2 [oss-security] 20101004 Re: CVE Request: more dovecot ACL issues http://marc.info/?l=oss-security&m=128622064325688&w=2