Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2007-2231

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.4%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2007-2231
  • Dovecot » Dovecot » Version: 1.0.beta1
    cpe:2.3:a:dovecot:dovecot:1.0.beta1
  • Dovecot » Dovecot » Version: 1.0.beta2
    cpe:2.3:a:dovecot:dovecot:1.0.beta2
  • Dovecot » Dovecot » Version: 1.0.beta3
    cpe:2.3:a:dovecot:dovecot:1.0.beta3
  • Dovecot » Dovecot » Version: 1.0.beta4
    cpe:2.3:a:dovecot:dovecot:1.0.beta4
  • Dovecot » Dovecot » Version: 1.0.beta5
    cpe:2.3:a:dovecot:dovecot:1.0.beta5
  • Dovecot » Dovecot » Version: 1.0.beta6
    cpe:2.3:a:dovecot:dovecot:1.0.beta6
  • Dovecot » Dovecot » Version: 1.0.beta7
    cpe:2.3:a:dovecot:dovecot:1.0.beta7
  • Dovecot » Dovecot » Version: 1.0.beta8
    cpe:2.3:a:dovecot:dovecot:1.0.beta8
  • Dovecot » Dovecot » Version: 1.0.beta9
    cpe:2.3:a:dovecot:dovecot:1.0.beta9
  • Dovecot » Dovecot » Version: 1.0.rc1
    cpe:2.3:a:dovecot:dovecot:1.0.rc1
  • Dovecot » Dovecot » Version: 1.0.rc10
    cpe:2.3:a:dovecot:dovecot:1.0.rc10
  • Dovecot » Dovecot » Version: 1.0.rc11
    cpe:2.3:a:dovecot:dovecot:1.0.rc11
  • Dovecot » Dovecot » Version: 1.0.rc12
    cpe:2.3:a:dovecot:dovecot:1.0.rc12
  • Dovecot » Dovecot » Version: 1.0.rc13
    cpe:2.3:a:dovecot:dovecot:1.0.rc13
  • Dovecot » Dovecot » Version: 1.0.rc14
    cpe:2.3:a:dovecot:dovecot:1.0.rc14
  • Dovecot » Dovecot » Version: 1.0.rc15
    cpe:2.3:a:dovecot:dovecot:1.0.rc15
  • Dovecot » Dovecot » Version: 1.0.rc16
    cpe:2.3:a:dovecot:dovecot:1.0.rc16
  • Dovecot » Dovecot » Version: 1.0.rc17
    cpe:2.3:a:dovecot:dovecot:1.0.rc17
  • Dovecot » Dovecot » Version: 1.0.rc18
    cpe:2.3:a:dovecot:dovecot:1.0.rc18
  • Dovecot » Dovecot » Version: 1.0.rc19
    cpe:2.3:a:dovecot:dovecot:1.0.rc19
  • Dovecot » Dovecot » Version: 1.0.rc2
    cpe:2.3:a:dovecot:dovecot:1.0.rc2
  • Dovecot » Dovecot » Version: 1.0.rc20
    cpe:2.3:a:dovecot:dovecot:1.0.rc20
  • Dovecot » Dovecot » Version: 1.0.rc21
    cpe:2.3:a:dovecot:dovecot:1.0.rc21
  • Dovecot » Dovecot » Version: 1.0.rc22
    cpe:2.3:a:dovecot:dovecot:1.0.rc22
  • Dovecot » Dovecot » Version: 1.0.rc23
    cpe:2.3:a:dovecot:dovecot:1.0.rc23
  • Dovecot » Dovecot » Version: 1.0.rc24
    cpe:2.3:a:dovecot:dovecot:1.0.rc24
  • Dovecot » Dovecot » Version: 1.0.rc25
    cpe:2.3:a:dovecot:dovecot:1.0.rc25
  • Dovecot » Dovecot » Version: 1.0.rc26
    cpe:2.3:a:dovecot:dovecot:1.0.rc26
  • Dovecot » Dovecot » Version: 1.0.rc27
    cpe:2.3:a:dovecot:dovecot:1.0.rc27
  • Dovecot » Dovecot » Version: 1.0.rc28
    cpe:2.3:a:dovecot:dovecot:1.0.rc28
  • Dovecot » Dovecot » Version: 1.0.rc3
    cpe:2.3:a:dovecot:dovecot:1.0.rc3
  • Dovecot » Dovecot » Version: 1.0.rc4
    cpe:2.3:a:dovecot:dovecot:1.0.rc4
  • Dovecot » Dovecot » Version: 1.0.rc5
    cpe:2.3:a:dovecot:dovecot:1.0.rc5
  • Dovecot » Dovecot » Version: 1.0.rc6
    cpe:2.3:a:dovecot:dovecot:1.0.rc6
  • Dovecot » Dovecot » Version: 1.0.rc7
    cpe:2.3:a:dovecot:dovecot:1.0.rc7
  • Dovecot » Dovecot » Version: 1.0.rc8
    cpe:2.3:a:dovecot:dovecot:1.0.rc8
  • Dovecot » Dovecot » Version: 1.0.rc9
    cpe:2.3:a:dovecot:dovecot:1.0.rc9


Contact Us

Shodan ® - All rights reserved