CVE-2010-4011

Name: CVE-2010-4011
Creator: NVD / NIST
Published: 2010-11-17T01:00:03.09+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.89%

Last modified Jun 16, 2026

CVE-2010-4011 is a vulnerability of currently unknown severity. Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage memory for user names, which allows remote authenticated users to read the private e-mail of other persons in opportunistic circumstances via standard e-mail clients accessing a user's own mailbox, related to a "memory aliasing issue.". EPSS estimates a 0.89% chance of exploitation in the next 30 days.

Description

Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage memory for user names, which allows remote authenticated users to read the private e-mail of other persons in opportunistic circumstances via standard e-mail clients accessing a user's own mailbox, related to a "memory aliasing issue."

Metrics

EPSS Probability

0.89%

54.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-200

Affected Software

Vendor	Product	Versions	Update
Apple	Mac Os X Server	10.6.5	10h574

References

http://lists.apple.com/archives/security-announce/2010//Nov/msg00001.htmlVendor Advisory
http://support.apple.com/kb/HT4452Vendor Advisory
http://lists.apple.com/archives/security-announce/2010//Nov/msg00001.htmlVendor Advisory
http://support.apple.com/kb/HT4452Vendor Advisory

Timeline

Published: Nov 17, 2010
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2010-4011?

How severe is CVE-2010-4011?

Severity scoring for CVE-2010-4011 is pending analysis. The EPSS model estimates a 0.89% probability of exploitation in the next 30 days.

How do I fix CVE-2010-4011?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2010-4011?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST