Download
| Alert*
oval:org.secpod.oval:def:70319
dovecot: IMAP and POP3 email server Several security issues were fixed in Dovecot. oval:org.secpod.oval:def:89002794 This update for dovecot22 fixes the following issues: - CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users" emails . oval:org.secpod.oval:def:506145 Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix: * dovecot: ... oval:org.secpod.oval:def:89002798 This update for dovecot23 fixes the following issues: Security issues fixed: - CVE-2020-12100: Fixed a resource exhaustion caused by deeply nested MIME parts . - CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users" emails . - CVE-2020-25275: Fixed a crash wh ... oval:org.secpod.oval:def:1802071 Mail delivery / parsing crashed when the 10 000th MIME part was message/rfc822 (or if parent was multipart/digest). This happened due to earlier MIME parsing changes for CVE-2020-12100. oval:org.secpod.oval:def:119310 Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages. oval:org.secpod.oval:def:69845 Several vulnerabilities have been discovered in the dovecot-dev email server. CVE-2020-24386 When imap hibernation is active, an attacker can cause dovecot-dev to discover file system directory structures and access other users" emails via specially crafted commands. CVE-2020-25275 Innokentii Senno ... oval:org.secpod.oval:def:73622 Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix: * dovecot: ... oval:org.secpod.oval:def:1504910 [1:2.3.8-9] - fix CVE-2020-24386 IMAP hibernation function allows mail access [1:2.3.8-8] - fix CVE-2020-25275 denial of service via mail MIME parsing [1:2.3.8-7] - change run directory from /var/run to /run [1:2.3.8-6] - fix mail storage block count parsing - MIME parser crashed when boundaries ... oval:org.secpod.oval:def:2500268 Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. oval:org.secpod.oval:def:705823 dovecot: IMAP and POP3 email server Several security issues were fixed in Dovecot. oval:org.secpod.oval:def:605381 Several vulnerabilities have been discovered in the Dovecot email server. CVE-2020-24386 When imap hibernation is active, an attacker can cause Dovecot to discover file system directory structures and access other users" emails via specially crafted commands. CVE-2020-25275 Innokentii Sennovskiy re ... oval:org.secpod.oval:def:89049436 This update for dovecot23 fixes the following issues: Security issues fixed: - CVE-2020-12100: Fixed a resource exhaustion caused by deeply nested MIME parts . - CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users" emails . - CVE-2020-25275: Fixed a crash wh ... oval:org.secpod.oval:def:89049534 This update for dovecot23 fixes the following issues: Security issues fixed: - CVE-2020-12100: Fixed a resource exhaustion caused by deeply nested MIME parts . - CVE-2020-12673: Fixed an improper implementation of NTLM that did not check the message buffer size . - CVE-2020-12674: Fixed an improper ... |