2388 matches found
[SECURITY] [DSA 4825-1] dovecot security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4825-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 04, 2021 https://www.debian.org/security/faq -...
CVE-2020-25275
Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts. Mitigation A potential mitigation is configuring the mail transfer agent to not accept messages with more than...
CVE-2020-24386
An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages and path disclosure. Mitigation To mitigate this flaw, ensure that imaphibernatetimeout is...
USN-4674-1: Dovecot vulnerabilities
It was discovered that Dovecot incorrectly handled certain imap hibernation commands. A remote authenticated attacker could possibly use this issue to access other users' email. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10. CVE-2020-24386 Innokentii Sennovskiy...
USN-4674-1 dovecot vulnerabilities
It was discovered that Dovecot incorrectly handled certain imap hibernation commands. A remote authenticated attacker could possibly use this issue to access other users' email. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 20.10. CVE-2020-24386 Innokentii Sennovskiy...
CVE-2020-25275
Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts...
CVE-2020-24386
An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages and path disclosure...
UBUNTU-CVE-2020-25275
Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts...
UBUNTU-CVE-2020-24386
An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages and path disclosure...
Dovecot 输入验证错误漏洞
Dovecot is an open source IMAP and POP3 mail server for Linux/Unix. A denial of service vulnerability exists in Dovecot versions prior to 2.3.13. The vulnerability stems from improper input validation issues with lda, lmtp, and imap. An attacker could exploit the vulnerability via a specially...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Dovecot vulnerabilities (USN-4674-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4674-1 advisory. It was discovered that Dovecot incorrectly handled certain imap hibernation commands. A remote authenticated attacker could...
Dovecot Security Breach
Dovecot is an open source IMAP and POP3 mail server based on Linux/UNIX-like systems. A security vulnerability exists in Dovecot before 2.3.13, which can be exploited by an attacker to access another user's email messages by triggering the deactivation of hibernation with a parameter controlled b...
DSA-4825-1 dovecot - security update
Bulletin has no description...
[ASA-202101-4] dovecot: multiple issues
Arch Linux Security Advisory ASA-202101-4 ========================================= Severity: High Date : 2021-01-04 CVE-ID : CVE-2020-24386 CVE-2020-25275 Package : dovecot Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1398 Summary ======= The package dovecot befo...
The vulnerability of the Dovecot mail server, related to incorrect validation of input data, allows a hacker to cause malfunctions in the authentication service.
The vulnerability of the Dovecot mail server is related to incorrect validation of input data. Exploiting this vulnerability can allow a remote attacker to cause malfunctions in the authentication service by sending a specially formatted NTLM request...
The vulnerability of the Dovecot mail server, related to incorrect validation of input data, allows attackers to cause failures in the authentication service.
The vulnerability of the Dovecot mail server is related to incorrect validation of input data. Exploiting this vulnerability can allow a remote attacker to cause failures in the authentication service by sending a specially formatted RPA request...
The vulnerability of the Dovecot mail server, caused by uncontrolled recursion, allows attackers to trigger a service failure.
The vulnerability of the Dovecot mail server arises due to an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures through a specially crafted email message...
NewStart CGSL CORE 5.05 / MAIN 5.05 : dovecot Multiple Vulnerabilities (NS-SA-2020-0105)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has dovecot packages installed that are affected by multiple vulnerabilities: - In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used ...
NewStart CGSL CORE 5.04 / MAIN 5.04 : dovecot Multiple Vulnerabilities (NS-SA-2020-0071)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has dovecot packages installed that are affected by multiple vulnerabilities: - In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used ...
Security fix for the ALT Linux 9 package dovecot version 2.3.11.3-alt1
2.3.11.3-alt1 built Dec. 7, 2020 Aleksei Nikiforov in task 262166 Nov. 19, 2020 Aleksei Nikiforov - Updated to 2.3.11.3 Fixes: CVE-2020-12100, CVE-2020-12673, CVE-2020-12674...