dovecot vulnerabilities (Debian)
99 vulnerabilities.
dovecotDebianAn issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker...6.8 MediumdovecotDebianIn Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service...7.5 HighdovecotDebianIn Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth...7.5 HighdovecotDebianIn Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote...7.5 HighdovecotDebianIn Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission...5.3 MediumdovecotDebianIn Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after...5.3 MediumdovecotDebianIn Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command...7.5 HighdovecotDebianIn Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol...9.8 CriticaldovecotDebianIn the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if...7.5 HighdovecotDebianIn the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when...7.5 HighdovecotDebianThe JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the...7.5 HighdovecotDebianIn Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow...8.8 HighdovecotDebianIt was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client...7.7 HighdovecotDebianA denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random...5.9 MediumdovecotDebianA specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out...5.9 MediumdovecotDebianA flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results...7.5 HighdovecotDebianThe ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote...5.9 MediumdovecotDebiandovecot - regression updateNo scoredovecotDebiandovecot - security updateNo scoredovecotDebianDovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb...3.7 LowdovecotDebianThe auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote...5.9 MediumdovecotDebianDovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not...5.0 MediumdovecotDebiancheckpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is...5.8 MediumdovecotDebianDovecot 2.0.x before 2.0.16, when ssl or starttls is enabled and hostname is used to define the...5.8 MediumdovecotDebianscript-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting,...6.5 MediumdovecotDebianscript-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration...6.5 MediumdovecotDebianlib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not...5.0 MediumdovecotDebianDovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service ...4.0 MediumdovecotDebianDovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.beta2 grants the admin permission to the owner...3.5 LowdovecotDebianplugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets...5.5 MediumdovecotDebianplugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets...5.5 MediumdovecotDebianThe ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in...6.4 MediumdovecotDebianUnspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a...5.0 MediumdovecotDebianDovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at...5.5 MediumdovecotDebianMultiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1...7.5 HighdovecotDebianBuffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus...4.4 MediumdovecotDebianDirectory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1...6.4 MediumdovecotDebianThe message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in...4.3 MediumdovecotDebiandovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable...2.1 LowdovecotDebianThe ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by...5.0 MediumdovecotDebianThe ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive...7.5 HighdovecotDebianArgument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when...6.8 MediumdovecotDebianDovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create...4.4 MediumdovecotDebianDovecot before 1.0.10, with certain configuration options including use of %variables, does not...6.8 MediumdovecotDebianThe ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to...6.0 MediumdovecotDebianDirectory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when...4.3 MediumdovecotDebianOff-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions,...5.0 MediumdovecotDebianDirectory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list...5.0 MediumdovecotDebianMultiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a...5.0 Medium