CVE-2007-6598: Dovecot

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password.

Affected products

• Dovecot Dovecot: up to and including 1.0.9

Published 2008-01-04. Last modified 2026-06-16.