2355 matches found
Ubuntu 6.06 LTS : dovecot regression (USN-288-4)
USN-288-3 fixed a vulnerability in dovecot. Unfortunately the Ubuntu 6.06 update had a regression which caused authentication using a MySQL database to not work any more. This update fixes this again. We apologize for the inconvenience. Note that Tenable Network Security has extracted the precedi...
Ubuntu 6.06 LTS / 6.10 : dovecot vulnerability (USN-387-1)
Dovecot was discovered to have an error when handling its index cache files. This error could be exploited by authenticated POP and IMAP users to cause a crash of the Dovecot server, or possibly to execute arbitrary code. Only servers using the non-default option 'mmapdisable=yes' were vulnerable...
Fedora 7 : dovecot-1.0.3-14.fc7 (2007-1485)
A new upstream version fixing a few bugs. The quota-warning patch was added as well. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
openSUSE 10 Security Update : dovecot (dovecot-2306)
Off-by-one buffer overflow in Dovecot 1.0 versions, when index files are used and mmapdisable is set to 'yes,' allows remote authenticated IMAP or POP3 users to cause a denial of service crash via unspecified vectors involving the cache file. CVE-2006-5973 %NASLMINLEVEL 70300 C Tenable Network...
openSUSE 10 Security Update : dovecot (dovecot-3135)
A bug in dovecot allowed users to read compressed mailboxes of other users under certain circumstances. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-3135. The text description of th...
openSUSE 10 Security Update : dovecot (dovecot-1987)
Dovecot might have been affected by the multibyte character set SQL injection issues for instance described in CVE-2006-2314. This patch fixes the MySQL and PostgreSQL backend to use the correct quoting methods when passing user-supplied strings. %NASLMINLEVEL 70300 C Tenable Network Security, In...
openSUSE 10 Security Update : dovecot (dovecot-1398)
Users could potentially find out mailbox names of other users CVE-2006-2414. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-1398. The text description of this plugin is C SUSE LLC...
Debian DSA-1359-1 : dovecot - directory traversal
It was discovered that dovecot, a secure mail server that supports mbox and maildir mailboxes, when configured to use non-system-user spools and compressed folders, may allow directory traversal in mailbox names. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...
[SECURITY] [DSA 1359-1] New dovecot packages fix directory traversal
------------------------------------------------------------------------ Debian Security Advisory DSA 1359-1 [email protected] http://www.debian.org/security/ Steve Kemp August 28th, 2007 http://www.debian.org/security/faq -...
DSA-1359-1 dovecot - directory traversal
Bulletin has no description...
Fedora Core 6 : dovecot-1.0.3-6.fc6 (2007-664)
A new upstream version fixing a few bugs. The quota-warning patch was added as well. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] Fedora Core 6 Update: dovecot-1.0.3-6.fc6
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats...
dovecot privilege escalation
User can save message flags without having permissions...
rPSA-2007-0161-1 dovecot
rPath Security Advisory: 2007-0161-1 Published: 2007-08-14 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Remote User Deterministic Privilege Escalation Updated Versions: dovecot=/conary.rpath.com@rpl:devel//1/1.0.3-0.1-1 References: https://vulners.com/cve/CVE-2007-4211...
[SECURITY] Fedora 7 Update: dovecot-1.0.3-14.fc7
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats...
CVE-2007-4211
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...
CVE-2007-4211
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...
Command injection
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...