CVE-2011-2167

script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script...

CVE-2011-2167

CVE-2011-2167 affects Dovecot 2.0.x before 2.0.13. The issue arises from script-login not honoring the chroot setting, which could allow remote authenticated users to perform directory traversal via a login script. Impact per sources is potential bypass of access restrictions and traversal of the...

CVE-2011-2167

script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script...

CVE-2011-1929

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service daemon crash or mailbox corruption via a crafted e-mail message...

CVE-2011-2167

script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script...

CVE-2011-1929

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service daemon crash or mailbox corruption via a crafted e-mail message...

CVE-2011-2166

Dovecot 2.0.x (pre-2.0.13) is affected by CVE-2011-2166 (and related CVEs) due to script-login not honoring user/group settings, potentially allowing remote authenticated users to bypass access controls. Severity is moderate (CVSS v2 base 6.5). Affected: Dovecot 2.0.x before 2.0.13; Impact: parti...

CVE-2011-2166

script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script...

CVE-2011-2166

script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script...

CVE-2011-2166

script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script...

PT-2011-3483

Name of the Vulnerable Software and Affected Versions Dovecot versions 1.2.x through 1.2.16 Dovecot versions 2.0.x through 2.0.12 Description The issue allows remote attackers to cause a denial of service, potentially leading to daemon crash or mailbox corruption, by sending a crafted e-mail...

CVE-2011-1929

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service daemon crash or mailbox corruption via a crafted e-mail message...

CVE-2011-2167: Improper Limitation of a Pathname to a Restricted Directory

script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script...

CVE-2011-1929: Improper Input Validation

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service daemon crash or mailbox corruption via a crafted e-mail message...

PT-2011-3654

Name of the Vulnerable Software and Affected Versions Dovecot versions 2.0.x through 2.0.12 Description The issue concerns a problem where the script-login in Dovecot does not follow the user and group configuration settings. This might allow remote authenticated users to bypass intended access...

PT-2011-3655

Name of the Vulnerable Software and Affected Versions Dovecot versions 2.0.x through 2.0.12 Description The issue concerns a problem where the script-login in Dovecot does not follow the chroot configuration setting. This might allow remote authenticated users to conduct directory traversal attac...

CVE-2011-2166: Undefined Security Weakness

script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script...

RHEL 6 : dovecot (RHSA-2011:0600)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0600 advisory. Dovecot is an IMAP server for Linux, UNIX, and similar operating systems, primarily written with security in mind. A flaw was found in the w...

Dovecot: Busy master process, receiving a lot of SIGCHLD signals rapidly while logging, could die

Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service master process outage by simultaneously disconnecting many 1 IMAP or 2 POP3 sessions...

Dovecot: Failed to properly update ACL cache, when multiple rules defined rights for one subject

plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving...