{"id":"CVE-2021-28374","aliases":["DEBIAN-CVE-2021-28374","DLA-2625-1","EUVD-2021-15057","GHSA-hcm8-3cv3-g73f","UBUNTU-CVE-2021-28374"],"status":"published","title":"The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a ...","description":"The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01271,"percentile":0.70072,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-312","CWE-732"],"published":"2021-03-15T04:51:56Z","modified":"2026-10-23T18:03:59Z","fixes":[{"ecosystem":"Debian:12","package":"courier-authlib","fixed_in":["0.71.1-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"courier-authlib","fixed_in":["0.71.1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"courier-authlib","fixed_in":["0.71.1-2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"courier-authlib","fixed_in":["0.66.4-9+deb9u1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"courier-authlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.71.1-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"courier-authlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.71.1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"courier-authlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.71.1-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"courier-authlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66.4-9+deb9u1"}]}],"versions":["0.66.4-9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"courier-authlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.66.1-1","0.66.4-2","0.66.4-3","0.66.4-3build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"courier-authlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.68.0-3ubuntu1","0.68.0-4","0.68.0-4build1","0.68.0-4ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"courier-authlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.69.0-2build2","0.69.0-2build3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"courier-authlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.71.1-2build1"]}],"products":[{"vendor":"debian","product":"courier-authlib"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://bugs.debian.org/984810","tags":["x_refsource_MISC","x_transferred","Mailing List","Vendor Advisory","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/04/msg00011.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28374"},{"url":"https://github.com/advisories/GHSA-hcm8-3cv3-g73f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-28374","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-28374","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28374","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-28374","description":"The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).","status":"published","published":"2021-03-15T04:51:56Z","modified":"2024-08-03T21:40:14.154Z","updated_at":"2026-11-02T14:33:09.175141Z"}],"euvd":[{"id":"EUVD-2021-15057","description":"The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).","status":"published","published":"2021-03-15T04:51:56Z","modified":"2024-08-03T21:40:14Z","updated_at":"2026-11-03T03:24:46.751124Z"}],"ghsa":[{"id":"GHSA-hcm8-3cv3-g73f","title":"The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a ...","description":"The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).","status":"published","published":"2022-05-24T17:44:36Z","modified":"2023-01-27T05:02:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-312"],"updated_at":"2026-11-02T14:42:04.146384Z"}],"nvd":[{"id":"CVE-2021-28374","description":"The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).","status":"published","published":"2021-03-15T05:15:12.467Z","modified":"2026-06-17T03:46:17.893Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:06:50.805771Z"}],"osv":[{"id":"CVE-2021-28374","description":"The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).","status":"published","published":"2021-03-15T05:15:12.467Z","modified":"2026-03-14T14:51:06.72195Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:19.129331Z"},{"id":"DEBIAN-CVE-2021-28374","description":"The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).","status":"published","published":"2021-03-15T05:15:12.467Z","modified":"2026-10-23T18:03:59.221821857Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:34.94143Z"},{"id":"UBUNTU-CVE-2021-28374","description":"The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).","status":"published","published":"2021-03-15T05:15:00Z","modified":"2026-04-22T12:50:16.171352Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:26.779273Z"},{"id":"DLA-2625-1","title":"courier-authlib - security update","status":"published","published":"2021-04-14T00:00:00Z","modified":"2026-03-09T01:20:23.704748Z","updated_at":"2026-11-02T15:46:10.712745Z"}]}}