Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

dovecot dovecot 1.0.rc14 vulnerabilities and exploits

(subscribe to this query)
4.4
CVSSv2
CVE-2008-1199
Dovecot prior to 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack.
Dovecot Dovecot 1.0.4Dovecot Dovecot 1.0.5Dovecot Dovecot 1.0.beta7Dovecot Dovecot 1.0.beta8Dovecot Dovecot 1.0.rc2Dovecot Dovecot 1.0.rc3Dovecot Dovecot 1.0 Rc29Dovecot Dovecot 1.0Dovecot Dovecot 1.0.10Dovecot Dovecot 1.0.8Dovecot Dovecot 1.0.9Dovecot Dovecot 1.0.rc11Dovecot Dovecot 1.0.rc12Dovecot Dovecot 1.0.rc13Dovecot Dovecot 1.0.rc6Dovecot Dovecot 1.0.rc7Dovecot Dovecot 0.99.13Dovecot Dovecot 0.99.14Dovecot Dovecot 1.0.6Dovecot Dovecot 1.0.7Dovecot Dovecot 1.0.rc1Dovecot Dovecot 1.0.rc10
4.3
CVSSv2
CVE-2007-2231
Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot prior to 1.0.rc29, when using the zlib plugin, allows remote malicious users to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.
Dovecot Dovecot 1.0.beta4Dovecot Dovecot 1.0.beta5Dovecot Dovecot 1.0.rc11Dovecot Dovecot 1.0.rc12Dovecot Dovecot 1.0.rc2Dovecot Dovecot 1.0.rc20Dovecot Dovecot 1.0.rc27Dovecot Dovecot 1.0.rc28Dovecot Dovecot 1.0.rc9Dovecot Dovecot 1.0.beta2Dovecot Dovecot 1.0.beta3Dovecot Dovecot 1.0.rc1Dovecot Dovecot 1.0.rc10Dovecot Dovecot 1.0.rc18Dovecot Dovecot 1.0.rc19Dovecot Dovecot 1.0.rc25Dovecot Dovecot 1.0.rc26Dovecot Dovecot 1.0.rc7Dovecot Dovecot 1.0.rc8Dovecot Dovecot 1.0.beta6Dovecot Dovecot 1.0.beta7Dovecot Dovecot 1.0.rc13
5
CVSSv2
CVE-2008-4578
The ACL plugin in Dovecot prior to 1.1.4 allows malicious users to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes.
Dovecot Dovecot 1.0.rc15Dovecot Dovecot 1.0.rc14Dovecot Dovecot 1.0.7Dovecot Dovecot 1.0.rc22Dovecot Dovecot 1.0.9Dovecot Dovecot 1.0.rc25Dovecot Dovecot 0.99.13Dovecot Dovecot 1.0.beta2Dovecot Dovecot 1.0.5Dovecot Dovecot 1.0.beta6Dovecot Dovecot 1.0.rc13Dovecot Dovecot 1.0.rc5Dovecot Dovecot 1.1.0Dovecot Dovecot 1.1.1Dovecot Dovecot 1.0.12Dovecot Dovecot 1.1Dovecot Dovecot 1.0.rc20Dovecot Dovecot 1.0.rc2Dovecot Dovecot 1.0.8Dovecot Dovecot 1.0.rc23Dovecot Dovecot 1.0.rc26Dovecot Dovecot 1.0.beta1
5
CVSSv2
CVE-2006-5973
Off-by-one buffer overflow in Dovecot 1.0test53 up to and including 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vec...
Timo Sirainen Dovecot 1.0.alpha5Timo Sirainen Dovecot 1.0.beta1Timo Sirainen Dovecot 1.0.beta8Timo Sirainen Dovecot 1.0.beta9Timo Sirainen Dovecot 1.0.rc1Timo Sirainen Dovecot 1.0.rc3Timo Sirainen Dovecot 1.0.rc4Timo Sirainen Dovecot 1.0.test54Timo Sirainen Dovecot 1.0.test55Timo Sirainen Dovecot 1.0.test63Timo Sirainen Dovecot 1.0.test64Timo Sirainen Dovecot 1.0.test71Timo Sirainen Dovecot 1.0.test72Timo Sirainen Dovecot 1.0.test79Timo Sirainen Dovecot 1.0.test80Timo Sirainen Dovecot 1.0.alpha3Timo Sirainen Dovecot 1.0.alpha4Timo Sirainen Dovecot 1.0.beta6Timo Sirainen Dovecot 1.0.beta7Timo Sirainen Dovecot 1.0.rc14Timo Sirainen Dovecot 1.0.rc2Timo Sirainen Dovecot 1.0.rc9
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook