SUSE CVE-2008-1218

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...

dovecot security update

1:2.3.16-3 - fix possible privilege escalation when similar master and non-master passdbs are used 2106231...

SUSE-SU-2022:2618-1 Security update for dovecot22

This update for dovecot22 fixes the following issues: - CVE-2022-30550: Fixed privilege escalation in dovecot when similar master and non-master passdbs are used bsc1201267...

FreeBSD : dovecot -- security hole in blocking passdbs (b39bdc06-ee42-11dc-8678-00a0cce0781e)

Dovecot reports : Security hole in blocking passdbs MySQL always. PAM, passwd and shadow if blocking=yes where user could specify extra fields in the password. The main problem here is when specifying 'skippasswordcheck' introduced in v1.0.11 for fixing master user logins, allowing the user to lo...

DEBIAN-CVE-2008-1218

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...

CVE-2008-1218

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...

CVE-2008-1218

CVE-2008-1218 describes an argument injection vulnerability in Dovecot when using blocking passdbs. The issue occurs because passwords containing TAB characters are treated as argument delimiters, enabling the skip_password_check field to be set and bypass password verification. Affected are Dove...

dovecot -- security hole in blocking passdbs

Dovecot reports: Security hole in blocking passdbs MySQL always. PAM, passwd and shadow if blocking=yes where user could specify extra fields in the password. The main problem here is when specifying "skippasswordcheck" introduced in v1.0.11 for fixing master user logins, allowing the user to log...