CVE-2006-5973

CVE-2006-5973: Off-by-one buffer overflow in Dovecot 1.0test53–1.0.rc14 (and possibly other versions) when index files are used and mmap_disable=yes. This allows remote authenticated IMAP/POP3 users to crash the Dovecot server via vectors involving the cache file. Connected advisories (e.g., Ubun...

CVE-2006-2414

Dovecot IMAP in 1.0 beta and 1.0 is affected by a directory traversal in LIST/DELETE IMAP commands, allowing remote attackers to enumerate mailbox names under the mbox directory. The issue is a remote programming error that can disclose information. Debian and other advisories document fixes: upg...

CVE-2006-0730

CVE-2006-0730 affects Dovecot prior to 1.0beta3. Reported as multiple vulnerabilities causing remote denial of service (application crash/hang) via vectors including (1) potential hangs in APPEND and (2) potential crashes in dovecot-auth and imap/pop3-login; vector 2 may be a double-free. Vulnera...