{"action":"Upgrade dovecot to 1:1.0.10-1 or later.","affected":[{"fixed":"1:1.0.10-1","introduced":"0"}],"component":"dovecot","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1:1.0.10-1"],"id":"tcs_01M5N8YGASRQD4VB08WYH7STJH","modified_at":"2026-10-21T17:47:35.648981670Z","published_at":"2008-01-04T02:46:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2007-6598","https://security-tracker.debian.org/tracker/CVE-2007-6598"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2007-6598","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2007-6598"}],"summary":"Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a differ"}