Dovecot vulnerability

2011-12-0800:00:00

ubuntu.com

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.2 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.3%

JSON

Releases

Ubuntu 11.10

Packages

dovecot - IMAP and POP3 email server

Details

It was discovered that Dovecot incorrectly validated certificate hostnames
when being used as a POP3 and IMAP proxy. If a remote attacker were able to
perform a machine-in-the-middle attack, this flaw could be exploited to view
sensitive information.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.10noarchdovecot-common< 1:2.0.13-1ubuntu3.2UNKNOWN
Ubuntu11.10noarchdovecot-dbg< 1:2.0.13-1ubuntu3.2UNKNOWN
Ubuntu11.10noarchdovecot-dev< 1:2.0.13-1ubuntu3.2UNKNOWN
Ubuntu11.10noarchdovecot-gssapi< 1:2.0.13-1ubuntu3.2UNKNOWN
Ubuntu11.10noarchdovecot-imapd< 1:2.0.13-1ubuntu3.2UNKNOWN
Ubuntu11.10noarchdovecot-ldap< 1:2.0.13-1ubuntu3.2UNKNOWN
Ubuntu11.10noarchdovecot-lmtpd< 1:2.0.13-1ubuntu3.2UNKNOWN
Ubuntu11.10noarchdovecot-managesieved< 1:2.0.13-1ubuntu3.2UNKNOWN
Ubuntu11.10noarchdovecot-mysql< 1:2.0.13-1ubuntu3.2UNKNOWN
Ubuntu11.10noarchdovecot-pgsql< 1:2.0.13-1ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.10	noarch	dovecot-common	< 1:2.0.13-1ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	dovecot-dbg	< 1:2.0.13-1ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	dovecot-dev	< 1:2.0.13-1ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	dovecot-gssapi	< 1:2.0.13-1ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	dovecot-imapd	< 1:2.0.13-1ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	dovecot-ldap	< 1:2.0.13-1ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	dovecot-lmtpd	< 1:2.0.13-1ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	dovecot-managesieved	< 1:2.0.13-1ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	dovecot-mysql	< 1:2.0.13-1ubuntu3.2	UNKNOWN
Ubuntu	11.10	noarch	dovecot-pgsql	< 1:2.0.13-1ubuntu3.2	UNKNOWN