Debian dla-4556 : dovecot-auth-lua - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4556 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4556-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-0394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed character...

EUVD-2026-16559

When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the domain component is directory partial. This allows inadvertently reading /etc/passwd or some other pa...

CVE-2026-0394

When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the domain component is directory partial. This allows inadvertently reading /etc/passwd or some other pa...

PT-2026-28308

Name of the Vulnerable Software and Affected Versions Dovecot affected versions not specified Description Dovecot is susceptible to a path traversal issue when configured to use per-domain passwd files. If these files are located one path component above /etc, or if a slash character is included ...

[SECURITY] Fedora 25 Update: php-horde-passwd-5.0.7-1.fc25

An application to change any user passwords stored in various backends like SQL, LDAP, Kolab, passwd files etc...

[SECURITY] Fedora 26 Update: php-horde-passwd-5.0.7-1.fc26

An application to change any user passwords stored in various backends like SQL, LDAP, Kolab, passwd files etc...

[SECURITY] Fedora 21 Update: php-horde-passwd-5.0.4-1.fc21

An application to change any user passwords stored in various backends like SQL, LDAP, Kolab, passwd files etc...

[SECURITY] Fedora 23 Update: php-horde-passwd-5.0.4-1.fc23

An application to change any user passwords stored in various backends like SQL, LDAP, Kolab, passwd files etc...

John the Ripper Linux Password Cracker

This module uses John the Ripper to identify weak passwords that have been acquired from unshadowed passwd files from Unix systems. The module will only crack MD5, BSDi and DES implementations by default. Set Crypt to true to also try to crack Blowfish and SHA256/512. Warning: This is much slower...