Dovecot symbolic links vulnerability

It's possible to access files readable by mail group via symlinks if mailextragroups=mail is set...

Debian: Security Advisory (DSA-1457-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1457-1 (dovecot)

The remote host is missing an update to dovecot announced via advisory DSA 1457-1. OpenVAS Vulnerability Test $Id: deb14571.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1457-1 dovecot Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1359-1 (dovecot)

The remote host is missing an update to dovecot announced via advisory DSA 1359-1. OpenVAS Vulnerability Test $Id: deb13591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1359-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1080-1 (dovecot)

The remote host is missing an update to dovecot announced via advisory DSA 1080-1. A problem has been discovered in the IMAP component of Dovecot, a secure mail server that supports mbox and maildir mailboxes, which can lead to information disclosure via directory traversal by authenticated users...

Debian: Security Advisory (DSA-1080-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1359-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 7.04 / 7.10 : dovecot vulnerability (USN-567-1)

It was discovered that in very rare configurations using LDAP, Dovecot may reuse cached connections for users with the same password. As a result, a user may be able to login as another if the connection is reused. The default Ubuntu configuration of Dovecot was not vulnerable. Note that Tenable...

USN-567-1: Dovecot vulnerability

It was discovered that in very rare configurations using LDAP, Dovecot may reuse cached connections for users with the same password. As a result, a user may be able to login as another if the connection is reused. The default Ubuntu configuration of Dovecot was not vulnerable...

Debian DSA-1457-1 : dovecot - programming error

It was discovered that Dovecot, a POP3 and IMAP server, only when used Remark: 'base' refers to a variable?! and should not contain something as base = %r! with LDAP authentication and 'base' contains variables, could allow a user to log in to the account of another user with the same password...

[SECURITY] [DSA 1457-1] New dovecot packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1457-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 09, 2008 http://www.debian.org/security/faq -...

DSA-1457-1 dovecot

Bulletin has no description...

Design/Logic Flaw

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password...

CVE-2007-6598

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password...

CVE-2007-6598

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password...

DEBIAN-CVE-2007-6598

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password...

CVE-2007-6598

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password...

CVE-2007-6598

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password...

CVE-2007-6598

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password...

CVE-2007-6598

CVE-2007-6598 affects Dovecot (IMAP/POP3 server). The issue, described as a flaw in the LDAP+auth cache handling, can allow remote authenticated users to log in as a different user who has the same password when certain configuration options (including use of %variables) are enabled. Affected rel...