CVE-2008-4870

LOW · CVSS 2.1 EPSS 0.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-11-01 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2008-4870

Severity

LOW

CVSS

2.1

EPSS

0.37%

Linux

Original Filing — NVD Description

dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.