CVE-2008-4870: Dovecot

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.

Affected products

• Dovecot Dovecot: version 1.0.7 only

Published 2008-11-01. Last modified 2026-06-16.