dovecot

96 results · Feed

• Unscored —
  CVE-2009-3897

  Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which all…

  dovecot Debian
  Nov 24, 2009
• Unscored —
  CVE-2009-3235

  Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived …

  dovecot Debian
  Sep 17, 2009
• Unscored —
  CVE-2009-2632

  Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and …

  dovecot Debian
  Sep 8, 2009
• Unscored —
  CVE-2008-5301

  Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attac…

  dovecot Debian
  Dec 1, 2008
• Unscored —
  CVE-2008-4907 Public exploit

  The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allow…

  dovecot Debian
  Nov 4, 2008
• Unscored —
  CVE-2008-4870

  dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.co…

  dovecot Debian
  Oct 31, 2008
• Unscored —
  CVE-2008-4577

  The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allow…

  dovecot Debian
  Oct 15, 2008
• Unscored —
  CVE-2008-4578

  The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right t…

  dovecot Debian
  Oct 15, 2008
• Unscored —
  CVE-2008-1218 Public exploit

  Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs,…

  dovecot Debian
  Mar 10, 2008
• Unscored —
  CVE-2008-1199

  Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might…

  dovecot Debian
  Mar 6, 2008
• Unscored —
  CVE-2007-6598

  Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the L…

  dovecot Debian
  Jan 4, 2008
• Unscored —
  CVE-2007-4211

  The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags vi…

  dovecot Debian
  Aug 8, 2007
• Unscored —
  CVE-2007-2231

  Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, …

  dovecot Debian
  Apr 25, 2007
• Unscored —
  CVE-2006-5973

  Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are use…

  dovecot Debian
  Nov 20, 2006
• Unscored —
  CVE-2006-2414

  Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories und…

  dovecot Debian
  May 16, 2006
• Unscored —
  CVE-2006-0730

  Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (ap…

  dovecot Debian
  Feb 16, 2006