Dovecot auth component remote denial of service vulnerability

Dovecot is an open source based on Linux/UNIX-like systems IMAP and POP3 mail server . A remote denial of service vulnerability exists in the auth component of Dovecot versions 2.2.25.1 through 2.2.26.1. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2016-8652

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service crash by aborting authentication without setting a username...

dovecot -- Dovecot DoS when passdb dict was used for authentication

Timo Sirainen reports: passdb/userdb dict: Don't double-expand %variables in keys. If dict was used as the authentication passdb, using specially crafted %variables in the username could be used to cause DoS...

SUSE-SU-2016:2915-1 Security update for dovecot22

This update for dovecot22 fixes the following issues: - insecure SSL/TLS key and certificate file creation CVE-2016-4983 bnc 984639 - Fix LDAP based authentication for some setups boo 1003952...

Dovecot Local Information Disclosure Vulnerability

Dovecot is an open source based on Linux/UNIX-like systems IMAP and POP3 mail server . A security vulnerability exists in Dovecot that allows remote attackers to submit special requests to obtain sensitive information...

The vulnerability of the Dovecot mail server, which allows a remote attacker to cause a service failure

The Dovecot software contains a vulnerability related to unterminated installed sessions. Exploiting these sessions allows a malicious attacker to trigger a service failure by sending specially crafted packets during an SSL/TLS handshake when establishing IMAP/POP3 connections...

The vulnerability of the Dovecot mail server, which allows a remote attacker to cause a service failure

The Dovecot software contains a bug in the implementation of the IMAP protocol /imap/cmd-append.c. A malicious actor can cause a service failure by using a specially crafted network packet with an incorrectly set “APPEND” parameter, thereby causing the software to enter an infinite loop...

CVE-2016-4983

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...

Open-Xchange: DIrectory Listing Found

Due to improper configuration , the following directory is open and the files are listed. URL : http://xi.dovecot.fi/debian...

Fedora 23 : dovecot-2.2.19-1.fc23 (2015-46afff8d90)

dovecot updated to 2.2.19 mdbox: Rebuilding could have caused message's reference count to overflow the 16bit number in some situations, causing problems when trying to expunge the duplicates. Various search fixes fts, solr, tika, lib-charset, indexer Various virtual plugin fixes Various fixes...

Fedora 22 : dovecot-2.2.19-1.fc22 (2015-48003c2343)

dovecot updated to 2.2.19 mdbox: Rebuilding could have caused message's reference count to overflow the 16bit number in some situations, causing problems when trying to expunge the duplicates. Various search fixes fts, solr, tika, lib-charset, indexer Various virtual plugin fixes Various fixes...

Fedora 21 : dovecot-2.2.19-1.fc21 (2015-780302029a)

dovecot updated to 2.2.19 mdbox: Rebuilding could have caused message's reference count to overflow the 16bit number in some situations, causing problems when trying to expunge the duplicates. Various search fixes fts, solr, tika, lib-charset, indexer Various virtual plugin fixes Various fixes...

Updated dovecot packages fix security vulnerability

A buffer overflow may occur when handling pop3deletedflag setting. This can lead to crashing POP3 sessions in normal use...

MGASA-2015-0452 Updated dovecot packages fix security vulnerability

A buffer overflow may occur when handling pop3deletedflag setting. This can lead to crashing POP3 sessions in normal use...

[SECURITY] Fedora 21 Update: dovecot-2.2.19-1.fc21

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...

[SECURITY] Fedora 23 Update: dovecot-2.2.19-1.fc23

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...

Fedora Update for dovecot FEDORA-2015-780302029

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for dovecot FEDORA-2015-48003

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2006-2414

Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the 1 LIST or 2 DELETE IMAP command...

CVE-2006-0730

Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service application crash or hang via unspecified vectors involving 1 "potential hangs" in the APPEND command and "potential crashes" in 2 dovecot-auth and 3 imap/pop3-login. NOTE: vector 2...