CVE-2010-0745

Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service CPU consumption via long headers in an e-mail message...

CVE-2010-0745

CVE-2010-0745 affects Dovecot 1.2.x prior to 1.2.11. An unspecified vulnerability allows remote attackers to cause a denial of service (CPU usage) by sending e-mails with long headers. Public sources (Mandriva/SUSE advisories and related OpenVAS entries) indicate upgrading to Dovecot 1.2.11 or ne...

Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002

The remote host is missing Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002. One or more of the following components are affected: AppKit Application Firewall AFP Server Apache ClamAV CoreAudio CoreMedia CoreTypes CUPS curl Cyrus IMAP Cyrus SASL DesktopServices Disk Images Directory...

Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002

The remote host is missing Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2010-0535

Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access control list SACL for sending and receiving e-mail, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors...

Design/Logic Flaw

Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access control list SACL for sending and receiving e-mail, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2010-0535

Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access control list SACL for sending and receiving e-mail, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2010-0535

CVE-2010-0535 concerns Dovecot on Mac OS X 10.6 before 10.6.3 with Kerberos enabled. An access control issue causes the SACL to be improperly enforced for sending/receiving mail, allowing a remote authenticated user to bypass intended per-user mail access restrictions. Affected: Mac OS X 10.6.x (...

CVE-2010-0535

Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access control list SACL for sending and receiving e-mail, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors...

Mac OS X < 10.6.3 Multiple Vulnerabilities

Binary data 5489.prm...

Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.3. Mac OS X 10.6.3 contains security fixes for the following products : - AFP Server - Apache - CoreAudio - CoreMedia - CoreTypes - CUPS - DesktopServices - Disk Images - Directory Services - Dovecot - Event Monitor -...

openssl: crash caused by a missing krb5_sname_to_principal() return value check

The ksslkeytabisavailable function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via SS...

[Backports-security-announce] Security Update for dovecot

Marco Nenciarini uploaded new packages for dovecot which fixed the following security problems: CVE not assigned jet Fetching a message with a huge header could have resulted in Dovecot eating a lot of CPU. An evil attacker could cause a DoS by sending forged messages. For the lenny-backports...

[Backports-security-announce] Security Update for dovecot

Marco Nenciarini uploaded new packages for dovecot which fixed the following security problems: CVE not assigned jet Fetching a message with a huge header could have resulted in Dovecot eating a lot of CPU. An evil attacker could cause a DoS by sending forged messages. For the lenny-backports...

Null pointer dereference

The ksslkeytabisavailable function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via SS...

CVE-2010-0433

The ksslkeytabisavailable function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via SS...

Debian DSA-1892-1 : dovecot - buffer overflow

It was discovered that the SIEVE component of dovecot, a mail server that supports mbox and maildir mailboxes, is vulnerable to a buffer overflow when processing SIEVE scripts. This can be used to elevate privileges to the dovecot system user. An attacker who is able to install SIEVE scripts...

openSUSE Security Update : dovecot12 (dovecot12-1811)

Dovecot created the configured 'basedir' /var/run/dovecot with mode 0777 if it didn't exist, therefore allowing local users to mess with e.g. the authentication socket CVE-2009-3897. Note that /var/run/dovecot is part of the dovecot rpm with proper permission settings. Therefor dovecot is not...

FreeBSD Ports: dovecot

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: dovecot

The remote host is missing an update to the system as announced in the referenced advisory. VID 30211c45-e52a-11de-b5cd-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID 30211c45-e52a-11de-b5cd-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...