CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

AZL-81710 CVE-2026-27858 affecting package dovecot 2.3.20-1

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No public...

FreeBSD Ports: dovecot-managesieve

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: dovecot-managesieve

The remote host is missing an update to the system as announced in the referenced advisory. VID 3efc106e-c451-11dd-a721-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 3efc106e-c451-11dd-a721-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Dovecot ManageSieve Server Detection

Binary data 4782.prm...

FreeBSD : dovecot-managesieve -- Script Name Directory Traversal Vulnerability (3efc106e-c451-11dd-a721-0030843d3802)

Secunia reports : The security issue is caused due to an input validation error when processing script names. This can be exploited to read or modify arbitrary files having '.sieve' extensions via directory traversal attacks, with the privileges of the attacker's user id. %NASLMINLEVEL 70300 C...