CVE-2010-3779

CVE-2010-3779 describes an access control vulnerability in Dovecot versions 1.2.x before 1.2.15 and 2.0.x before 2.0.beta2. Authenticated users could gain administrative permissions over their own non-public mailboxes, potentially bypassing intended access restrictions by manipulating mailbox ACLs, as demonstrated with symlinked shared mailboxes. This vulnerability has a CVSS score of 3.5 (AV:N/AC:M/Au:S/C:N/I:P/A:N), indicating a network-based attack with medium complexity requiring authentication, leading to partial integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.