CVE-2010-3780
Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service ...
Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions.
Exploit likelihood
What each source reports
NVD Score used
Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions.
- Record
CVE-2010-3780- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions.
- Record
CVE-2010-3780- Updated
- 2026-11-02
EUVDEUVD-2010-3759 No score
Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions.
- Record
EUVD-2010-3759- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cc69-pg9v-6fx9 No score
Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service ...
Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions.
- Record
GHSA-cc69-pg9v-6fx9- Updated
- 2026-11-02
OSV No score
Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions.
- Record
CVE-2010-3780- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-3780 No score
Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions.
- Record
DEBIAN-CVE-2010-3780- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dovecotDebian:12 |
before 1:1.2.15-1 | 1:1.2.15-1 |
dovecotDebian:13 |
before 1:1.2.15-1 | 1:1.2.15-1 |
dovecotDebian:14 |
before 1:1.2.15-1 | 1:1.2.15-1 |
dovecotRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
dovecot-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
dovecot-develRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
dovecot-mysqlRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
dovecot-pgsqlRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
dovecot-pigeonholeRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
dovecotRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
dovecot-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
dovecot-develRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
dovecot-mysqlRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
dovecot-pgsqlRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
dovecot-pigeonholeRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 1:2.0.9-2.el6 | 1:2.0.9-2.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3780 is a medium vulnerability (CVSS 4.0) in Dovecot, published October 6, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.06%, the 81st percentile. Fixed in dovecot 1:1.2.15-1.
References
ubuntu.com/usn/USN-1059-1
mandriva.com/security/advisories?name=MDVSA-2010:217
secunia.com/advisories/43220
vupen.com/english/advisories/2011/0301
dovecot.org/list/dovecot/2010-October/053450.html
redhat.com/support/errata/RHSA-2011-0600.html
Show 15 moreShow less
nvd.nist.gov/vuln/detail/CVE-2010-3780
github.com/advisories/GHSA-cc69-pg9v-6fx9
security-tracker.debian.org/tracker/CVE-2010-3780
access.redhat.com/errata/RHSA-2011:0600
bugzilla.redhat.com/show_bug.cgi?id=637056
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0600.json
cve.org/CVERecord?id=CVE-2010-3707