Log in Start free

Vulnerability · Published Mar 15, 2021 · Assigned by mitre

CVE-2021-28374

High 7.5

In plain English

A high-severity security flaw in the courier-authlib package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.3%top 30.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12courier-authlib0.71.1-2DEBIAN-CVE-2021-28374
Debian:13courier-authlib0.71.1-2DEBIAN-CVE-2021-28374
Debian:14courier-authlib0.71.1-2DEBIAN-CVE-2021-28374
Ubuntu:22.04:LTScourier-authlibno fix listedUBUNTU-CVE-2021-28374

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References