PT-2008-2811 · Dovecot · Dovecot

Kingcope · Published 2008-03-10 · Updated 2018-10-11 · CVE-2008-1218

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dovecot versions 1.0.x through 1.0.12 Dovecot versions 1.1.x through 1.1.rc2

Description The issue allows remote attackers to bypass the password check by using a password that contains TAB characters. These characters are treated as argument delimiters, enabling the skip password check field to be specified.

Recommendations For Dovecot versions 1.0.x through 1.0.12, update to version 1.0.13 or later. For Dovecot versions 1.1.x through 1.1.rc2, update to version 1.1.rc3 or later.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2008-1218

DSA-1516-1

Affected Products

Dovecot

References · 25

• 🔥 https://exploit-db.com/exploits/5257 · Exploit
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00358.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-1218 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html · Vendor Advisory
• http://debian.org/security/2008/dsa-1516 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-1218 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00381.html · Vendor Advisory
• https://usn.ubuntu.com/593-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1218 · Security Note
• https://osv.dev/vulnerability/CVE-2008-1218 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200803-25.xml · Vendor Advisory
• http://securityfocus.com/bid/28181 · Note
• http://secunia.com/advisories/29557 · Note
• http://secunia.com/advisories/32151 · Note
• http://secunia.com/advisories/29364 · Note