[SECURITY] Fedora Core 5 Update: dovecot-1.0-0.beta8.3.fc5

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats...

Dovecot IMAP: Mailbox names list disclosure with mboxes

Giving "1 LIST .. " IMAP command allows the user to see all files and directories under the mbox root's parent directory, so potentially you could see other users' mailbox names. Nothing can be done with them though, so it's not possible to read or modify them. There are also some other less than...

FreeBSD : getmail -- symlink vulnerability during maildir delivery (56)

The following package needs to be updated: getmail %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg8c33b299163b11d9ac1b000d614f7fad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

CVE-2004-0881

CVE-2004-0881 affects getmail up to 4.2.0 (and other versions before 3.2.5). When run as root, getmail could overwrite arbitrary files via a symlink attack on maildir subdirectories, enabling local, privilege-escalating impact. Public advisories from Debian (DSA-553) and Slackware note a root com...

CVE-2004-0881: Undefined Security Weakness

getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir...

getmail -- symlink vulnerability during maildir delivery

David Watson reports a symlink vulnerability in getmail. If run as root not the recommended mode of operation, a local user may be able to cause getmail to write files in arbitrary directories via a symlink attack on subdirectories of the maildir...