PT-2008-2811 · Dovecot · Dovecot

Kingcope · Publicado 2008-03-10 · Atualizado 2018-10-11 · CVE-2008-1218

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dovecot versions 1.0.x through 1.0.12 Dovecot versions 1.1.x through 1.1.rc2

Description The issue allows remote attackers to bypass the password check by using a password that contains TAB characters. These characters are treated as argument delimiters, enabling the skip password check field to be specified.

Recommendations For Dovecot versions 1.0.x through 1.0.12, update to version 1.0.13 or later. For Dovecot versions 1.1.x through 1.1.rc2, update to version 1.1.rc3 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2008-1218

DSA-1516-1

Produtos afetados

Dovecot

Referências · 25

• 🔥 https://exploit-db.com/exploits/5257 · Exploit
• http://securityfocus.com/bid/28181 · Nota
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00358.html · Aviso do Fabricante
• http://secunia.com/advisories/29557 · Nota
• http://secunia.com/advisories/32151 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-1218 · Aviso do Fabricante
• http://secunia.com/advisories/29364 · Nota
• http://secunia.com/advisories/29226 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html · Aviso do Fabricante
• http://debian.org/security/2008/dsa-1516 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2008-1218 · Aviso do Fabricante
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00381.html · Aviso do Fabricante
• http://dovecot.org/list/dovecot-news/2008-March/000064.html · Nota
• http://dovecot.org/list/dovecot-news/2008-March/000065.html · Nota
• https://issues.rpath.com/browse/RPL-2341 · Nota