Skip to content
OpenAdvisories
Unscored DSA-1516-1 2 CVEs

dovecot - privilege escalation

Published Mar 14, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 dovecot 1.0.rc15-2etch4

Vulnerabilities 2

  • Unscored —

    Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might…

  • Unscored —
    CVE-2008-1218 Public exploit

    Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs,…