2530 matches found
Mac OS X : OS X Server < 4.1 Multiple Vulnerabilities (POODLE)
The remote Mac OS X host has a version of OS X Server installed that is prior 4.1. It is, therefore, affected by vulnerabilities in the following components : - Dovecot - Firewall - Postfix - Wiki Server C Tenable Network Security, Inc. include'compat.inc'; if description scriptid83088;...
Mandriva Linux Security Advisory : dovecot (MDVSA-2015:113)
Updated dovecot packages fix security vulnerability. Dovecot before 2.2.13 is vulnerable to a DoS attack against imap/pop3-login processes. If SSL/TLS handshake was started but wasn't finished, the login process attempted to eventually forcibly disconnect the client, but failed to do it correctly...
GLSA-201412-03 : Dovecot: Denial of Service
The remote host is affected by the vulnerability described in GLSA-201412-03 Dovecot: Denial of Service Dovecot does not properly close connections, allowing a resource exhaustion for incomplete SSL/TLS handshakes. Impact : A remote attacker could possibly cause a Denial of Service condition...
Dovecot: Denial of service
Background Dovecot is an open source IMAP and POP3 email server. Description Dovecot does not properly close connections, allowing a resource exhaustion for incomplete SSL/TLS handshakes. Impact A remote attacker could possibly cause a Denial of Service condition. Workaround There is no known...
Amazon Linux AMI : dovecot (ALAS-2014-386)
Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service resource consumption via an incomplete SSL/TLS handshake for an IMAP/POP3 connection. C Tenable Network Security,...
Exim and Dovecot Insecure Configuration 命令执行漏洞
No description provided by source...
Medium: dovecot
Issue Overview: Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service resource consumption via an incomplete SSL/TLS handshake for an IMAP/POP3 connection. Affected...
CentOS Update for dovecot CESA-2014:0790 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Dovecot 1.1.x Invalid Message Address Parsing Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31997/info Dovecot is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted email headers. An attacker can exploit this issue to prevent recipients from accessing their...
Dovecot with Exim sender_address Parameter - Remote Command Execution
No description provided by source...
Dovecot IMAP 1.0.10 <= 1.1rc2 - Remote Email Disclosure Exploit
No description provided by source. lame Dovecot IMAP 1.0.10 - 1.1rc3 Exploit Here's an exploit for the recent TAB vulnerability in Dovecot. It's nothing special since in the wild there are few to none targets because of the special option which has to be set. see CVE Entry CVE-2008-1218 Exploit...
RedHat Update for dovecot RHSA-2014:0790-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 6 / 7 : dovecot (ELSA-2014-0790)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0790 advisory. 1:2.0.9-7.1 - fix CVE-2014-3430: denial of service through maxxing out SSL connections 1108001 Tenable has extracted the preceding description block directl...
Scientific Linux Security Update : dovecot on SL6.x i386/srpm/x86_64 (20140625)
It was discovered that Dovecot did not properly discard connections trapped in the SSL/TLS handshake phase. A remote attacker could use this flaw to cause a denial of service on an IMAP/POP3 server by exhausting the pool of available connections and preventing further, legitimate connections to t...
CentOS 6 : dovecot (CESA-2014:0790)
Updated dovecot packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
RHEL 6 / 7 : dovecot (RHSA-2014:0790)
Updated dovecot packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
dovecot security update
CentOS Errata and Security Advisory CESA-2014:0790 Updated dovecot packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS...
Moderate: Red Hat Security Advisory: dovecot security update
Updated dovecot packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
dovecot: denial of service through maxxing out SSL connections
Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service resource consumption via an incomplete SSL/TLS handshake for an IMAP/POP3 connection...
