CVE-2010-3779 Privilege escalation in n/a

What is CVE-2010-3779?

CVE-2010-3779 is a low-severity vulnerability in Dovecot Dovecot, published on 6 Oct 2010. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.beta2 grants the admin permission to the owner of each mailbox in a non-public namespace, which might allow remote authenticated users to bypass intended access restrictions by changing the ACL of a mailbox, as demonstrated by a symlinked shared mailbox.

Weakness: CWE-264

Which versions are affected by CVE-2010-3779?

It affects 1 product.

Products include Dovecot Dovecot.

How do I fix CVE-2010-3779?

Upgrade to a fixed version.

Is CVE-2010-3779 being exploited?

There is no known exploitation of CVE-2010-3779 in the wild and no public exploit code.

Other vulnerabilities in Dovecot Dovecot

• CVE-2026-24031 Auth bypass in OX Dovecot Pro High 7.7
• CVE-2025-59032 Denial of service in OX Dovecot Pro High 7.5
• CVE-2026-27858 Denial of service in OX Dovecot Pro High 7.5
• CVE-2021-29157 Path traversal in n/a High 7.5
• CVE-2020-10957 Null dereference in n/a High 7.5

All Dovecot Dovecot vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2010-3779, GHSA-83v9-j2gr-cch4.