Search CVE reports

Toggle filters

51 – 60 of 62 results

CVE-2008-4870

Low priority
Ignored

dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.

1 affected package

dovecot

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dovecot — — — —
Show less packages

CVE-2008-4578

Low priority
Ignored

The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the “k” right to create unauthorized “parent/child/child” mailboxes.

1 affected package

dovecot

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dovecot — — — —
Show less packages

CVE-2008-4577

Low priority

Some fixes available 1 of 2

The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions.

1 affected package

dovecot

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dovecot — — — —
Show less packages

CVE-2008-1218

Medium priority
Not affected

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are...

1 affected package

dovecot

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dovecot — — — —
Show less packages

CVE-2008-1199

Medium priority
Fixed

Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are...

1 affected package

dovecot

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dovecot — — — —
Show less packages

CVE-2007-6598

Low priority
Fixed

Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password.

1 affected package

dovecot

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dovecot — — — —
Show less packages

CVE-2007-4211

Negligible priority
Ignored

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a (1) COPY or (2) APPEND command.

1 affected package

dovecot

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dovecot — — — —
Show less packages

CVE-2007-2231

Unknown priority
Fixed

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in...

1 affected package

dovecot

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dovecot — — — —
Show less packages

CVE-2006-5973

Unknown priority
Fixed

Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to “yes,” allows remote authenticated IMAP or POP3 users to cause a denial of service...

1 affected package

dovecot

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
dovecot — — — —
Show less packages

CVE-2006-2314

Unknown priority

Some fixes available 21 of 24

PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications that use multibyte...

14 affected packages

amarok, dovecot, exim4, libapache2-mod-auth-pgsql, php5...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
amarok — — — —
dovecot — — — —
exim4 — — — —
libapache2-mod-auth-pgsql — — — —
php5 — — — —
postfix — — — —
postgresql — — — —
postgresql-7.4 — — — —
postgresql-8.1 — — — —
postgresql-8.2 — — — —
psycopg — — — —
psycopg2 — — — —
pygresql — — — —
python-pgsql — — — —
Show all 14 packages Show less packages
  1. Previous page
  2. 3
  3. 4
  4. 5
  5. 6
  6. 7
  7. Next page
Export to JSON