Debian DSA-1359-1 : dovecot - directory traversal

It was discovered that dovecot, a secure mail server that supports mbox and maildir mailboxes, when configured to use non-system-user spools and compressed folders, may allow directory traversal in mailbox names. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

[SECURITY] [DSA 1359-1] New dovecot packages fix directory traversal

------------------------------------------------------------------------ Debian Security Advisory DSA 1359-1 [email protected] http://www.debian.org/security/ Steve Kemp August 28th, 2007 http://www.debian.org/security/faq -...

DSA-1359-1 dovecot - directory traversal

Bulletin has no description...

Fedora Core 6 : dovecot-1.0.3-6.fc6 (2007-664)

A new upstream version fixing a few bugs. The quota-warning patch was added as well. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] Fedora Core 6 Update: dovecot-1.0.3-6.fc6

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats...

dovecot privilege escalation

User can save message flags without having permissions...

rPSA-2007-0161-1 dovecot

rPath Security Advisory: 2007-0161-1 Published: 2007-08-14 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Remote User Deterministic Privilege Escalation Updated Versions: dovecot=/conary.rpath.com@rpl:devel//1/1.0.3-0.1-1 References: https://vulners.com/cve/CVE-2007-4211...

[SECURITY] Fedora 7 Update: dovecot-1.0.3-14.fc7

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats...

Command injection

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

DEBIAN-CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

CVE-2007-4211

CVE-2007-4211 affects Dovecot’s ACL plugin prior to version 1.0.3, where remote authenticated users with insert rights could use COPY or APPEND to set additional flags. The connected advisories indicate remediation by upgrading Dovecot (e.g., to 1.0.7 in various Linux distributions such as Miracl...

CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

CVE-2007-4211: Undefined Security Weakness

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

[USN-487-1] Dovecot vulnerability

=========================================================== Ubuntu Security Notice USN-487-1 July 17, 2007 dovecot vulnerability CVE-2007-2231 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.0...

USN-487-1: Dovecot vulnerability

It was discovered that Dovecot, when configured to use non-system-user spools and compressed folders, would allow directory traversals in mailbox names. Remote authenticated users could potentially read email owned by other users...

Fedora Core 5 : dovecot-1.0-0.beta8.4.fc5 (2007-493)

Fri Mar 2 2007 Tomas Janousek - 1.0-0.beta8.4.fc5 - a little master login fix 224925 - fix for CVE-2007-2231 238440 - Thu Dec 21 2006 Tomas Janousek - 1.0-0.beta8.3.fc5 - fixed default paths in the example mkcert.sh to match configuration defaults fixes 183151 - fixed off by one 216508,...