CVE-2010-3707

plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving more specific entries that occur after less specific entries, which allows remote authenticated users to bypass intended access restrictions via a request to read or modify a mailbox.

• CWE-264

• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html
• http://marc.info/?l=oss-security&m=128620520732377&w=2
• http://marc.info/?l=oss-security&m=128622064325688&w=2
• http://secunia.com/advisories/43220
• http://www.dovecot.org/list/dovecot/2010-October/053450.htmlVendor Advisory
• http://www.dovecot.org/list/dovecot/2010-October/053451.htmlVendor Advisory
• http://www.dovecot.org/list/dovecot/2010-October/053452.htmlVendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:217
• http://www.redhat.com/support/errata/RHSA-2011-0600.html
• http://www.ubuntu.com/usn/USN-1059-1
• http://www.vupen.com/english/advisories/2010/2572Vendor Advisory
• http://www.vupen.com/english/advisories/2010/2840
• http://www.vupen.com/english/advisories/2011/0301
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html
• http://marc.info/?l=oss-security&m=128620520732377&w=2
• http://marc.info/?l=oss-security&m=128622064325688&w=2
• http://secunia.com/advisories/43220
• http://www.dovecot.org/list/dovecot/2010-October/053450.htmlVendor Advisory
• http://www.dovecot.org/list/dovecot/2010-October/053451.htmlVendor Advisory
• http://www.dovecot.org/list/dovecot/2010-October/053452.htmlVendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:217
• http://www.redhat.com/support/errata/RHSA-2011-0600.html
• http://www.ubuntu.com/usn/USN-1059-1
• http://www.vupen.com/english/advisories/2010/2572Vendor Advisory
• http://www.vupen.com/english/advisories/2010/2840
• http://www.vupen.com/english/advisories/2011/0301

Published

Oct 6, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3701lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.…
• CVE-2010-3702The Gfx::getPos function in the PDF parser in xpdf before 3.…
• CVE-2010-3703The PostScriptFunction::PostScriptFunction function in poppl…
• CVE-2010-3704The FoFiType1::parse function in fofi/FoFiType1.cc in the PD…
• CVE-2010-3705The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in t…
• CVE-2010-3706plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.…
• CVE-2010-3708The serialization implementation in JBoss Drools in Red Hat …
• CVE-2010-3709The ZipArchive::getArchiveComment function in PHP 5.2.x thro…
• CVE-2010-3710Stack consumption vulnerability in the filter_var function i…
• CVE-2010-3711libpurple in Pidgin before 2.7.4 does not properly validate …
• CVE-2010-3712Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x be…
• CVE-2010-3713rss.php in UseBB before 1.0.11 does not properly handle foru…