Directory Traversal Vulnerability in Dovecot 2.0.x before 2.0.13

Directory Traversal Vulnerability in Dovecot 2.0.x before 2.0.13

CVE-2011-2167 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script.

Learn more about our User Device Pen Test.