2530 matches found
[ASA-201905-6] dovecot: denial of service
Arch Linux Security Advisory ASA-201905-6 ========================================= Severity: Medium Date : 2019-05-06 CVE-ID : CVE-2019-11494 CVE-2019-11499 Package : dovecot Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-954 Summary ======= The package dovecot...
Directory Traversal
dovecot is vulnerable to authorization bypass. A remote, authenticated user can bypass intended access restrictions or conduct a directory traversal attack by leveraging login scripts...
Man-in-the-Middle (MitM)
dovecot is vulnerable to man-in-the-middle. A flaw was found in the way Dovecot performed remote server identity verification, when it was configured to proxy IMAP and POP3 connections to remote hosts using TLS/SSL protocols. A remote attacker could use this flaw to conduct man-in-the-middle...
Ubuntu 18.10 / 19.04 : Dovecot vulnerabilities (USN-3961-1)
It was discovered that the Dovecot Submission login service incorrectly handled certain operations. A remote attacker could possibly use this issue to cause Dovecot to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directl...
FreeBSD : Dovecot -- Multiple vulnerabilities (3f98ccb3-6b8a-11e9-9b5c-a4badb296695)
Aki Tuomi reports : Submission-login crashes with signal 11 due to NULL pointer access when authentication is aborted by disconnecting. This can lead to denial-of-service attack by persistent attackers. Aki Tuomi reports : Submission-login crashes when authentication is started over TLS secured...
USN-3961-1: Dovecot vulnerabilities
It was discovered that the Dovecot Submission login service incorrectly handled certain operations. A remote attacker could possibly use this issue to cause Dovecot to crash, resulting in a denial of service...
CVE-2019-11499
In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message...
CVE-2019-11494
In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when the client disconnects prematurely during the AUTH command...
UBUNTU-CVE-2019-11494
In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when the client disconnects prematurely during the AUTH command...
UBUNTU-CVE-2019-11499
In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message...
PT-2019-3525 · Dovecot +3 · Dovecot +3
Name of the Vulnerable Software and Affected Versions: Dovecot versions 2.3.3 through 2.3.5.2 Description: The issue is related to the implementation of the Internet Message Access Protocol IMAP in the Dovecot mail server, specifically a null pointer dereference. This can be exploited by a remote...
PT-2019-3527 · Dovecot +3 · Dovecot +3
Name of the Vulnerable Software and Affected Versions: Dovecot versions 2.3.3 through 2.3.5.2 Description: The issue is related to the IMAP Server in Dovecot, where the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication...
EulerOS 2.0 SP5 : dovecot (EulerOS-SA-2019-1280)
According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that Dovecot incorrectly handled client certificates. A remote attacker in possession of a valid certificate with an empty...
EulerOS 2.0 SP2 : dovecot (EulerOS-SA-2019-1279)
According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that Dovecot incorrectly handled client certificates. A remote attacker in possession of a valid certificate with an empty...
Dovecot < 2.2.36.3, 2.3.x < 2.3.5.1 Privilege Escalation Vulnerability
Dovecot is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Dovecot < 2.3.5.2 Denial of Service Vulnerability
Dovecot is prone to a Denial of Service DoS vulnerability. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...
The vulnerability of the Dovecot mail server, related to the execution of operations beyond buffer boundaries in memory, allows attackers to increase their privileges.
The vulnerability of the Dovecot mail server stems from the lack of checks for buffer sizes during the reading of FTS headers or POP3-UIDL from the Dovecot pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2019-10691
The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username...
