CVE-2010-0535: Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the servi...

Security readout for executives and security teams

This is an older Apple Mac OS X Server mail access-control issue. On Mac OS X 10.6 before 10.6.3, Dovecot could fail to enforce mail service restrictions when Kerberos was enabled. A valid user could potentially send or receive email despite intended denial rules. Exposure is likely limited to legacy Mac OS X 10.6 systems running Dovecot-based mail services with Kerberos enabled and SACL restrictions configured. Modern systems are unlikely to be affected unless unsupported legacy hosts remain in use. Prioritize if legacy Apple mail servers still exist, especially in regulated environments relying on access restrictions. For most organizations, urgency is low to moderate because the issue is old, authenticated, and configuration-dependent. Mitigation focus: Upgrade affected Mac OS X 10.6 systems to 10.6.3 or later, per Apple guidance.; Check Apple advisory HT4077 for applicable security update details.; Disable or restrict legacy mail services if the host cannot be updated..

Prepared

Jun 28, 2026, 06:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.