CVE-2010-0535: Apple Mac OS X

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access control list (SACL) for sending and receiving e-mail, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors.

Affected products

• Apple Mac OS X: version 10.6.0 only; version 10.6.1 only; version 10.6.2 only
• Apple Mac OS X Server: version 10.6.0 only; version 10.6.1 only; version 10.6.2 only

Published 2010-03-30. Last modified 2026-06-16.