CVE-2010-4011

Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage memory for user names, which allows remote authenticated users to read the private e-mail of other persons in opportunistic circumstances via standard e-mail clients accessing a user's own mailbox, related to a "memory aliasing issue."

Score

CVSS 2.0 4.0 Medium

Status

Modified - product-security@apple.com

Published

2010-11-17

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Mac Os X Server (Apple)

References

• http://lists.apple.com/archives/security-announce/2010//Nov/msg00001.html
• http://support.apple.com/kb/HT4452