Re: [Dovecot] Solving CVE-2008-4870

2008-11-19 Thread Timo Sirainen
On Thu, 2008-11-13 at 15:57 +0200, Timo Sirainen wrote: On Nov 13, 2008, at 1:03 PM, Michal Hlavinka wrote: Hi, we're trying to solve CVE-2008-4870 = rhbz#436287 = dovecot.conf is world readable - possible password exposure. This problem seems to be little more complicated than we

Re: [Dovecot] Solving CVE-2008-4870

2008-11-13 Thread intrigeri
Hello, Michal Hlavinka wrote (13 Nov 2008 11:03:48 GMT) : we're trying to solve CVE-2008-4870 = rhbz#436287 = dovecot.conf is world readable - possible password exposure. This problem seems to be little more complicated than we thought. dovecot.conf can contain passphrase for ssl key,

Re: [Dovecot] Solving CVE-2008-4870

2008-11-13 Thread Timo Sirainen
On Nov 13, 2008, at 1:03 PM, Michal Hlavinka wrote: Hi, we're trying to solve CVE-2008-4870 = rhbz#436287 = dovecot.conf is world readable - possible password exposure. This problem seems to be little more complicated than we thought. dovecot.conf can contain passphrase for ssl key, which