Dovecot Information Disclosure Vulnerability

Dovecot is an open source based on Linux/UNIX-like systems IMAP and POP3 mail server . An information disclosure vulnerability exists in Dovecot. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An unauthorized attacker could exploit t...

RHEL 8 : dovecot (RHSA-2019:3467)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3467 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and...

CVE-2016-4983

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...

CVE-2016-4983

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...

AZL-44988 CVE-2016-4983 affecting package dovecot 2.3.20-1

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...

Code injection

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...

CVE-2016-4983

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...

CVE-2016-4983

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...

CVE-2016-4983

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...

CVE-2016-4983

CVE-2016-4983: Dovecot postinstall script in the dovecot rpm allows local users to read newly created SSL/TLS key files. Documents describe it as a local access issue with low severity; remediation/patch specifics are not detailed in the provided sources. Some advisories for older Red Hat release...

dovecot: Improper certificate validation

It was discovered that Dovecot incorrectly handled client certificates. A remote attacker in possession of a valid certificate with an empty username field could possibly use this issue to impersonate other users...

Important: dovecot

Issue Overview: In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.CVE-2019-11500 Affected Packages:...

The vulnerability of the Internet Message Access Protocol (IMAP) implementation in the Dovecot mail server allows a attacker to cause a service failure.

The vulnerability of the Internet Message Access Protocol IMAP implementation in the Dovecot mail server is related to the use of a zero pointer. Exploiting this vulnerability allows a malicious actor to cause service failures by using a specially crafted message for authentication purposes...

The vulnerability of the Internet Message Access Protocol (IMAP) implementation in the Dovecot mail server allows a attacker to cause a service failure.

The vulnerability of the Internet Message Access Protocol IMAP implementation in the Dovecot mail server is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

cPanel Injection Vulnerability (CNVD-2019-36137)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An injection vulnerability exists in cPanel. An attacker can exploit this vulnerability to perform string format injection in...

Virtuozzo 7 : dovecot / dovecot-devel / dovecot-mysql / etc (VZLSA-2019-2836)

An update for dovecot is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2019-11500

A flaw was found in dovecot. IMAP and ManageSieve protocol parsers do not properly handle the NULL byte when scanning data in quoted strings which leads to an out of bounds heap memory write. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

Fedora 31 : 1:dovecot (2019-ea638fb605)

CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

CentOS Update for dovecot CESA-2019:2885 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 6 : dovecot (CESA-2019:2885)

An update for dovecot is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...