CVE-2008-4870

LOW · CVSS 2.1 EPSS 0.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-11-01 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 2.1. It affects Linux.

CVE

CVE-2008-4870

Severity

LOW

CVSS

2.1

EPSS

0.37%

Linux

Original NVD Description

dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.