CVE-2013-6171

checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the response to the dovecot-auth server.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name	Vendor	Start Version	End Version
Dovecot	Dovecot	*	2.2.6 (including)
Dovecot	Dovecot	2.0-beta1 (including)	2.0-beta1 (including)
Dovecot	Dovecot	2.0.0 (including)	2.0.0 (including)
Dovecot	Dovecot	2.0.1 (including)	2.0.1 (including)
Dovecot	Dovecot	2.0.2 (including)	2.0.2 (including)
Dovecot	Dovecot	2.0.3 (including)	2.0.3 (including)
Dovecot	Dovecot	2.0.4 (including)	2.0.4 (including)
Dovecot	Dovecot	2.0.5 (including)	2.0.5 (including)
Dovecot	Dovecot	2.0.6 (including)	2.0.6 (including)
Dovecot	Dovecot	2.0.7 (including)	2.0.7 (including)
Dovecot	Dovecot	2.0.8 (including)	2.0.8 (including)
Dovecot	Dovecot	2.0.9 (including)	2.0.9 (including)
Dovecot	Dovecot	2.0.10 (including)	2.0.10 (including)
Dovecot	Dovecot	2.0.11 (including)	2.0.11 (including)
Dovecot	Dovecot	2.0.12 (including)	2.0.12 (including)
Dovecot	Dovecot	2.0.13 (including)	2.0.13 (including)
Dovecot	Dovecot	2.0.14 (including)	2.0.14 (including)
Dovecot	Dovecot	2.0.15 (including)	2.0.15 (including)
Dovecot	Dovecot	2.1-rc1 (including)	2.1-rc1 (including)
Dovecot	Dovecot	2.1-rc2 (including)	2.1-rc2 (including)
Dovecot	Dovecot	2.1-rc3 (including)	2.1-rc3 (including)
Dovecot	Dovecot	2.1-rc5 (including)	2.1-rc5 (including)
Dovecot	Dovecot	2.1-rc6 (including)	2.1-rc6 (including)
Dovecot	Dovecot	2.1-rc7 (including)	2.1-rc7 (including)
Dovecot	Dovecot	2.1.0 (including)	2.1.0 (including)
Dovecot	Dovecot	2.1.1 (including)	2.1.1 (including)
Dovecot	Dovecot	2.1.2 (including)	2.1.2 (including)
Dovecot	Dovecot	2.1.3 (including)	2.1.3 (including)
Dovecot	Dovecot	2.1.4 (including)	2.1.4 (including)
Dovecot	Dovecot	2.1.5 (including)	2.1.5 (including)
Dovecot	Dovecot	2.1.6 (including)	2.1.6 (including)
Dovecot	Dovecot	2.1.7 (including)	2.1.7 (including)
Dovecot	Dovecot	2.1.10 (including)	2.1.10 (including)
Dovecot	Dovecot	2.1.11 (including)	2.1.11 (including)
Dovecot	Dovecot	2.1.12 (including)	2.1.12 (including)
Dovecot	Dovecot	2.1.13 (including)	2.1.13 (including)
Dovecot	Dovecot	2.1.14 (including)	2.1.14 (including)
Dovecot	Dovecot	2.1.15 (including)	2.1.15 (including)
Dovecot	Dovecot	2.2-rc1 (including)	2.2-rc1 (including)
Dovecot	Dovecot	2.2-rc2 (including)	2.2-rc2 (including)
Dovecot	Dovecot	2.2-rc3 (including)	2.2-rc3 (including)
Dovecot	Dovecot	2.2-rc4 (including)	2.2-rc4 (including)
Dovecot	Dovecot	2.2-rc5 (including)	2.2-rc5 (including)
Dovecot	Dovecot	2.2-rc6 (including)	2.2-rc6 (including)
Dovecot	Dovecot	2.2-rc7 (including)	2.2-rc7 (including)
Dovecot	Dovecot	2.2.0 (including)	2.2.0 (including)
Dovecot	Dovecot	2.2.1 (including)	2.2.1 (including)
Dovecot	Dovecot	2.2.2 (including)	2.2.2 (including)
Dovecot	Dovecot	2.2.3 (including)	2.2.3 (including)
Dovecot	Dovecot	2.2.4 (including)	2.2.4 (including)
Dovecot	Dovecot	2.2.5 (including)	2.2.5 (including)
Dovecot	Ubuntu	lucid	*
Dovecot	Ubuntu	precise	*
Dovecot	Ubuntu	quantal	*
Dovecot	Ubuntu	raring	*
Dovecot	Ubuntu	saucy	*
Dovecot	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-6171
CWE	https://cwe.mitre.org/data/definitions/287.html

Improper Authentication

Weakness

Affected Software

Potential Mitigations

References

CVE-2013-6171

Improper Authentication

Weakness

Affected Software

Potential Mitigations

Related Attack Patterns

References