CVE-2008-1199 Path traversal in n/a

Medium 4.4 Published 6 Mar 2008 Updated 7 Aug 2024

Local attackers can read or modify other users' mail files via symlink attacks when mail_extra_groups is enabled.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2008-1199?

CVE-2008-1199 is a medium-severity path traversal vulnerability in Dovecot Dovecot, published on 6 Mar 2008. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack.

Weakness: CWE-59, CWE-16

Which versions are affected by CVE-2008-1199?

It affects 1 product.

Products include Dovecot Dovecot.

How do I fix CVE-2008-1199?

Upgrade to a fixed version.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2008-1199 being exploited?

There is no known exploitation of CVE-2008-1199 in the wild and no public exploit code.

All Dovecot Dovecot vulnerabilities

Sources

Also known as DEBIAN-CVE-2008-1199, GHSA-778f-c3r9-6vmp.