Re: [Dovecot] Solving CVE-2008-4870

2008-11-19 Thread Timo Sirainen
On Thu, 2008-11-13 at 15:57 +0200, Timo Sirainen wrote: > On Nov 13, 2008, at 1:03 PM, Michal Hlavinka wrote: > > > Hi, > > > > we're trying to solve CVE-2008-4870 = rhbz#436287 = dovecot.conf is > > world readable - possible password exposure. > > > > This problem seems to be little more compli

Re: [Dovecot] Solving CVE-2008-4870

2008-11-13 Thread Timo Sirainen
On Nov 13, 2008, at 1:03 PM, Michal Hlavinka wrote: Hi, we're trying to solve CVE-2008-4870 = rhbz#436287 = dovecot.conf is world readable - possible password exposure. This problem seems to be little more complicated than we thought. dovecot.conf can contain passphrase for ssl key, which

Re: [Dovecot] Solving CVE-2008-4870

2008-11-13 Thread intrigeri
Hello, Michal Hlavinka wrote (13 Nov 2008 11:03:48 GMT) : > we're trying to solve CVE-2008-4870 = rhbz#436287 = dovecot.conf is world > readable - > possible password exposure. > This problem seems to be little more complicated than we thought. > dovecot.conf can contain passphrase for ssl key,

[Dovecot] Solving CVE-2008-4870

2008-11-13 Thread Michal Hlavinka
Hi, we're trying to solve CVE-2008-4870 = rhbz#436287 = dovecot.conf is world readable - possible password exposure. This problem seems to be little more complicated than we thought. dovecot.conf can contain passphrase for ssl key, which is available for everyone since dovecot.conf has world