CVE:CVE-2008-4578
CNNVD:CNNVD-200810-273
Dovecot中的ACL插件允许攻击者通过运行"k"权利创建未经授权的"parent/child/child"邮箱，以绕过预设的访问限制。
solution:Upgrade dovecot dovecot to a higher version than 1.1.3,0.99.13,0.99.14,1.0,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.12,1.0.beta1,1.0.beta2,1.0.beta3,1.0.beta4,1.0.beta5,1.0.beta6,1.0.beta7,1.0.beta8,1.0.beta9,1.0.rc1,1.0.rc2,1.0.rc3,1.0.rc4,1.0.rc5,1.0.rc6,1.0.rc7,1.0.rc8,1.0.rc9,1.0.rc10,1.0.rc11,1.0.rc12,1.0.rc13,1.0.rc14,1.0.rc15,1.0.rc16,1.0.rc17,1.0.rc18,1.0.rc19,1.0.rc20,1.0.rc21,1.0.rc22,1.0.rc23,1.0.rc24,1.0.rc25,1.0.rc26,1.0.rc27,1.0.rc28,1.0_rc29,1.1,1.1:rc2,1.1.0,1.1.1,1.1.2,and avoid the version (,1.1.3],0.99.13,0.99.14,1.0,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.12,1.0.beta1,1.0.beta2,1.0.beta3,1.0.beta4,1.0.beta5,1.0.beta6,1.0.beta7,1.0.beta8,1.0.beta9,1.0.rc1,1.0.rc2,1.0.rc3,1.0.rc4,1.0.rc5,1.0.rc6,1.0.rc7,1.0.rc8,1.0.rc9,1.0.rc10,1.0.rc11,1.0.rc12,1.0.rc13,1.0.rc14,1.0.rc15,1.0.rc16,1.0.rc17,1.0.rc18,1.0.rc19,1.0.rc20,1.0.rc21,1.0.rc22,1.0.rc23,1.0.rc24,1.0.rc25,1.0.rc26,1.0.rc27,1.0.rc28,1.0_rc29,1.1,1.1:rc2,1.1.0,1.1.1,1.1.2