CVE-2009-3897

Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the basedir directory, and possibly the basedir directory...

PT-2009-6119 · Dovecot · Dovecot

Name of the Vulnerable Software and Affected Versions: Dovecot versions 1.2.x through 1.2.7 Description: The issue allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base dir directory, and possibly the base dir directory...

Dovecot不安全base_dir权限漏洞

BUGTRAQ ID: 37084 Dovecot是Linux/UNIX类系统平台上的开源IMAP和POP3服务器。 Dovecot默认将basedir目录的权限设置为0777，本地用户可以替换Dovecot的认证套接字以其他用户的身份登录。 Dovecot 1.2.x 厂商补丁： Dovecot ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.dovecot.org/list/dovecot-news/2009-November/000143.html...

dovecot -- Insecure directory permissions

Dovecot author reports: Dovecot v1.2.x had been creating basedir and its parents if necessary with 0777 permissions. The basedir's permissions get changed to 0755 automatically at startup, but you may need to chmod the parent directories manually...

Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities

Binary data 800795.prm...

Apple Plugs 58 Holes in Monster Mac OS X Update

Apple has dropped another mega-patch to cover a total of 58 documented vulnerabilities affecting the Mac OS X ecosystem. The majority of the flaws could allow a remote attacker to gain complete control of an unpatched system, meaning that this update carries an “extremely critical rating.” It...

Mac OS X 10.6.x < 10.6.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.2. Mac OS X 10.6.2 contains security fixes for the following products : - Adaptive Firewall - Apache - Apache Portable Runtime - Certificate Assistant - CoreMedia - CUPS - Dovecot - fetchmail - file - FTP Server - Help...

openSUSE Security Update : dovecot (dovecot-1366)

This update of dovecot fixes two buffer overflows in the sieve plug-in CVE-2009-2632, CVE-2009-3235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-1366. The text description of this...

openSUSE 10 Security Update : dovecot (dovecot-6539)

This update of dovecot fixes two buffer overflows in the sieve plug-in CVE-2009-2632, CVE-2009-3235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-6539. The text description of this...

openSUSE Security Update : dovecot (dovecot-1366)

This update of dovecot fixes two buffer overflows in the sieve plug-in CVE-2009-2632, CVE-2009-3235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-1366. The text description of this...

Ubuntu USN-838-1 (dovecot)

The remote host is missing an update to dovecot announced via advisory USN-838-1. OpenVAS Vulnerability Test $Id: ubuntu8381.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8381.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-838-1 dovecot Authors: Thomas...

Ubuntu: Security Advisory (USN-838-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[Backports-security-announce] Security update for dovecot

Jaldhar H. Vyas uploaded new packages which fix the following problem: DSA-1892-1 CVE-2009-2632, CVE-2009-3235 Multiple stack-based buffer overflows in the Sieve plugin in Dovecot For the etch-backports distribution the problem has been fixed in version 1.0.15-2.3+lenny1bpo40+1 For the...

[Backports-security-announce] Security update for dovecot

Jaldhar H. Vyas uploaded new packages which fix the following problem: DSA-1892-1 CVE-2009-2632, CVE-2009-3235 Multiple stack-based buffer overflows in the Sieve plugin in Dovecot For the etch-backports distribution the problem has been fixed in version 1.0.15-2.3+lenny1bpo40+1 For the...

[Backports-security-announce] Security update for dovecot

Jaldhar H. Vyas uploaded new packages which fix the following problem: DSA-1892-1 CVE-2009-2632, CVE-2009-3235 Multiple stack-based buffer overflows in the Sieve plugin in Dovecot For the etch-backports distribution the problem has been fixed in version 1.0.15-2.3+lenny1bpo40+1 For the...

Ubuntu 8.04 LTS / 8.10 / 9.04 : dovecot vulnerabilities (USN-838-1)

It was discovered that the ACL plugin in Dovecot would incorrectly handle negative access rights. An attacker could exploit this flaw to access the Dovecot server, bypassing the intended access restrictions. This only affected Ubuntu 8.04 LTS. CVE-2008-4577 It was discovered that the ManageSieve...

USN-838-1: Dovecot vulnerabilities

It was discovered that the ACL plugin in Dovecot would incorrectly handle negative access rights. An attacker could exploit this flaw to access the Dovecot server, bypassing the intended access restrictions. This only affected Ubuntu 8.04 LTS. CVE-2008-4577 It was discovered that the ManageSieve...

Debian Security Advisory DSA 1892-1 (dovecot)

The remote host is missing an update to dovecot announced via advisory DSA 1892-1. OpenVAS Vulnerability Test $Id: deb18921.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1892-1 dovecot Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:242-1 (dovecot)

The remote host is missing an update to dovecot announced via advisory MDVSA-2009:242-1. OpenVAS Vulnerability Test $Id: mdksa20092421.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:242-1 dovecot Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandrake Security Advisory MDVSA-2009:242 (dovecot)

The remote host is missing an update to dovecot announced via advisory MDVSA-2009:242. OpenVAS Vulnerability Test $Id: mdksa2009242.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:242 dovecot Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...