Bug#469457: closed by Fabio Tranchitella [EMAIL PROTECTED] (Bug#469457: fixed in dovecot 1:1.0.12-1)

This addresses the issue for Lenny Sid, but how about the version in Etch ? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#469457: dovecot-imapd: allows to read other users' mboxes in /var/mail

Package: dovecot-imapd Severity: critical Tags: security Justification: root security hole I believe all versions of Dovecot in Debian are concerned by this warning : http://dovecot.org/list/dovecot/2008-March/029196.html On fairly standard Debian installations (Etch Lenny) with mail delivered