Dovecot: >> Dovecot >> 1.0.rc26 Security Vulnerabilities
The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes.
CVSS Score
5.0
EPSS Score
0.008
Published
2008-10-15
Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.
CVSS Score
4.3
EPSS Score
0.009
Published
2007-04-25