PT-2025-54917

Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.4.3 Description Sending invalid base64 SASL data can disrupt the login process by disconnecting it from the authentication server, leading to the failure of all active authentication sessions. This can be used to...

ALPINE-CVE-2024-23185

Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "fullvalue" buffer out of the smaller chunks. The fullvalue buffer has no si...

CVE-2024-23185

Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "fullvalue" buffer out of the smaller chunks. The fullvalue buffer has no si...

SUSE CVE-2006-5973

Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmapdisable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service crash via unspecified vectors involving the cache file...

The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address.

...

Dovecot 'base_dir' Insecure Permissions Security Bypass Vulnerability

This host has Dovecot installed and is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: gbdovecotbasedirsecbypassvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Description: Dovecot 'basedir' Insecure Permissions Security Bypass Vulnerability Authors: Antu Sanadi Copyright:...

Dovecot Sieve Plugin Multiple Buffer Overflow Vulnerabilities

This host has Dovecot Sieve Plugin installed and is prone to multiple Buffer Overflow Vulnerabilities OpenVAS Vulnerability Test $Id: secpoddovecotsievemultbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Dovecot Sieve Plugin Multiple Buffer Overflow Vulnerabilities Authors: Antu Sanadi Copyright:...