[Dovecot] Security hole #4: Specific LDAP + auth cache configuration may mix up user logins

[Geert Hendrickx]

On Fri, Dec 21, 2007 at 12:38:12AM +0200, Timo Sirainen wrote:
> Somehow I doubt there are any Dovecot setups left that unknowingly have
> this problem, but it still counts as a security hole. The possibility to
> cause this problem exists in Dovecot v1.0.rc11 and later.
> 
> [...]
> 
> You can fix this by upgrading to v1.0.10 (to be released soon), or using
> this patch: http://hg.dovecot.org/dovecot-1.0/raw-rev/2cedab21cd6d



Is Dovecot 1.1.x affected as well?

	Geert


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 478 bytes
Desc: not available
Url : http://dovecot.org/pipermail/dovecot/attachments/20071221/6a7c3035/attachment.bin