Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    6 vulnerabilities by timo_sirainen

    CVE-2006-5973 (GCVE-0-2006-5973)

    Vulnerability from nvd – Published: 2006-11-20 19:00 – Updated: 2024-08-07 20:12
    VLAI
    Summary
    Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://dovecot.org/pipermail/dovecot-news/2006-No… mailing-listx_refsource_MLIST
    http://www.ubuntu.com/usn/usn-387-1 vendor-advisoryx_refsource_UBUNTU
    http://secunia.com/advisories/23150 third-party-advisoryx_refsource_SECUNIA
    http://www.novell.com/linux/security/advisories/2… vendor-advisoryx_refsource_SUSE
    http://secunia.com/advisories/23007 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/23172 third-party-advisoryx_refsource_SECUNIA
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/archive/1/452081/100… mailing-listx_refsource_BUGTRAQ
    http://dovecot.org/list/dovecot-news/2006-Novembe… mailing-listx_refsource_MLIST
    http://secunia.com/advisories/23213 third-party-advisoryx_refsource_SECUNIA
    http://securitytracker.com/id?1017288 vdb-entryx_refsource_SECTRACK
    http://www.vupen.com/english/advisories/2006/4614 vdb-entryx_refsource_VUPEN
    http://www.securityfocus.com/bid/21183/info vdb-entryx_refsource_BID
    https://issues.rpath.com/browse/RPL-802 x_refsource_CONFIRM
    Date Public
    2006-11-19 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T20:12:31.341Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "[Dovecot-news] 20091119 1.0.rc15 released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://dovecot.org/pipermail/dovecot-news/2006-November/000024.html"
              },
              {
                "name": "USN-387-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/usn-387-1"
              },
              {
                "name": "23150",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23150"
              },
              {
                "name": "SUSE-SA:2006:073",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://www.novell.com/linux/security/advisories/2006_73_mono.html"
              },
              {
                "name": "23007",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23007"
              },
              {
                "name": "23172",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23172"
              },
              {
                "name": "dovecot-indexcache-bo(30433)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30433"
              },
              {
                "name": "20061119 Dovecot IMAP/POP3 server: Off-by-one buffer overflow",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/452081/100/0/threaded"
              },
              {
                "name": "[Dovecot-news] 20061119 Security hole #2: Off-by-one buffer overflow with mmap_disable=yes",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://dovecot.org/list/dovecot-news/2006-November/000023.html"
              },
              {
                "name": "23213",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23213"
              },
              {
                "name": "1017288",
                "tags": [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
                  "x_transferred"
                ],
                "url": "http://securitytracker.com/id?1017288"
              },
              {
                "name": "ADV-2006-4614",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/4614"
              },
              {
                "name": "21183",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/21183/info"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://issues.rpath.com/browse/RPL-802"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-11-19T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to \"yes,\" allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-17T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "[Dovecot-news] 20091119 1.0.rc15 released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://dovecot.org/pipermail/dovecot-news/2006-November/000024.html"
            },
            {
              "name": "USN-387-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/usn-387-1"
            },
            {
              "name": "23150",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23150"
            },
            {
              "name": "SUSE-SA:2006:073",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://www.novell.com/linux/security/advisories/2006_73_mono.html"
            },
            {
              "name": "23007",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23007"
            },
            {
              "name": "23172",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23172"
            },
            {
              "name": "dovecot-indexcache-bo(30433)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30433"
            },
            {
              "name": "20061119 Dovecot IMAP/POP3 server: Off-by-one buffer overflow",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/452081/100/0/threaded"
            },
            {
              "name": "[Dovecot-news] 20061119 Security hole #2: Off-by-one buffer overflow with mmap_disable=yes",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://dovecot.org/list/dovecot-news/2006-November/000023.html"
            },
            {
              "name": "23213",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23213"
            },
            {
              "name": "1017288",
              "tags": [
                "vdb-entry",
                "x_refsource_SECTRACK"
              ],
              "url": "http://securitytracker.com/id?1017288"
            },
            {
              "name": "ADV-2006-4614",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/4614"
            },
            {
              "name": "21183",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/21183/info"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://issues.rpath.com/browse/RPL-802"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-5973",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to \"yes,\" allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "[Dovecot-news] 20091119 1.0.rc15 released",
                  "refsource": "MLIST",
                  "url": "http://dovecot.org/pipermail/dovecot-news/2006-November/000024.html"
                },
                {
                  "name": "USN-387-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/usn-387-1"
                },
                {
                  "name": "23150",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23150"
                },
                {
                  "name": "SUSE-SA:2006:073",
                  "refsource": "SUSE",
                  "url": "http://www.novell.com/linux/security/advisories/2006_73_mono.html"
                },
                {
                  "name": "23007",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23007"
                },
                {
                  "name": "23172",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23172"
                },
                {
                  "name": "dovecot-indexcache-bo(30433)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30433"
                },
                {
                  "name": "20061119 Dovecot IMAP/POP3 server: Off-by-one buffer overflow",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/452081/100/0/threaded"
                },
                {
                  "name": "[Dovecot-news] 20061119 Security hole #2: Off-by-one buffer overflow with mmap_disable=yes",
                  "refsource": "MLIST",
                  "url": "http://dovecot.org/list/dovecot-news/2006-November/000023.html"
                },
                {
                  "name": "23213",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23213"
                },
                {
                  "name": "1017288",
                  "refsource": "SECTRACK",
                  "url": "http://securitytracker.com/id?1017288"
                },
                {
                  "name": "ADV-2006-4614",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/4614"
                },
                {
                  "name": "21183",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/21183/info"
                },
                {
                  "name": "https://issues.rpath.com/browse/RPL-802",
                  "refsource": "CONFIRM",
                  "url": "https://issues.rpath.com/browse/RPL-802"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-5973",
        "datePublished": "2006-11-20T19:00:00.000Z",
        "dateReserved": "2006-11-20T00:00:00.000Z",
        "dateUpdated": "2024-08-07T20:12:31.341Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-2414 (GCVE-0-2006-2414)

    Vulnerability from nvd – Published: 2006-05-16 10:00 – Updated: 2024-08-07 17:51
    VLAI
    Summary
    Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the (1) LIST or (2) DELETE IMAP command.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.debian.org/security/2006/dsa-1080 vendor-advisoryx_refsource_DEBIAN
    http://www.dovecot.org/list/dovecot-news/2006-May… x_refsource_MISC
    http://www.vupen.com/english/advisories/2006/2013 vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/20315 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/17961 vdb-entryx_refsource_BID
    http://securityreason.com/securityalert/913 third-party-advisoryx_refsource_SREASON
    http://secunia.com/advisories/20308 third-party-advisoryx_refsource_SECUNIA
    http://dovecot.org/list/dovecot-cvs/2006-May/0055… x_refsource_CONFIRM
    http://www.securityfocus.com/archive/1/433878/100… mailing-listx_refsource_BUGTRAQ
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    Date Public
    2006-05-12 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T17:51:04.513Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "DSA-1080",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
                  "x_transferred"
                ],
                "url": "http://www.debian.org/security/2006/dsa-1080"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.dovecot.org/list/dovecot-news/2006-May/000006.html"
              },
              {
                "name": "ADV-2006-2013",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/2013"
              },
              {
                "name": "20315",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/20315"
              },
              {
                "name": "17961",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/17961"
              },
              {
                "name": "913",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/913"
              },
              {
                "name": "20308",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/20308"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://dovecot.org/list/dovecot-cvs/2006-May/005563.html"
              },
              {
                "name": "20060512 Dovecot IMAP: Mailbox names list disclosure with mboxes",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/433878/100/0/threaded"
              },
              {
                "name": "dovecot-imap-list-information-disclosure(26536)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26536"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-05-12T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via \"..\" sequences in the (1) LIST or (2) DELETE IMAP command."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-18T14:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "DSA-1080",
              "tags": [
                "vendor-advisory",
                "x_refsource_DEBIAN"
              ],
              "url": "http://www.debian.org/security/2006/dsa-1080"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.dovecot.org/list/dovecot-news/2006-May/000006.html"
            },
            {
              "name": "ADV-2006-2013",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/2013"
            },
            {
              "name": "20315",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/20315"
            },
            {
              "name": "17961",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/17961"
            },
            {
              "name": "913",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/913"
            },
            {
              "name": "20308",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/20308"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://dovecot.org/list/dovecot-cvs/2006-May/005563.html"
            },
            {
              "name": "20060512 Dovecot IMAP: Mailbox names list disclosure with mboxes",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/433878/100/0/threaded"
            },
            {
              "name": "dovecot-imap-list-information-disclosure(26536)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26536"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-2414",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via \"..\" sequences in the (1) LIST or (2) DELETE IMAP command."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "DSA-1080",
                  "refsource": "DEBIAN",
                  "url": "http://www.debian.org/security/2006/dsa-1080"
                },
                {
                  "name": "http://www.dovecot.org/list/dovecot-news/2006-May/000006.html",
                  "refsource": "MISC",
                  "url": "http://www.dovecot.org/list/dovecot-news/2006-May/000006.html"
                },
                {
                  "name": "ADV-2006-2013",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/2013"
                },
                {
                  "name": "20315",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/20315"
                },
                {
                  "name": "17961",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/17961"
                },
                {
                  "name": "913",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/913"
                },
                {
                  "name": "20308",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/20308"
                },
                {
                  "name": "http://dovecot.org/list/dovecot-cvs/2006-May/005563.html",
                  "refsource": "CONFIRM",
                  "url": "http://dovecot.org/list/dovecot-cvs/2006-May/005563.html"
                },
                {
                  "name": "20060512 Dovecot IMAP: Mailbox names list disclosure with mboxes",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/433878/100/0/threaded"
                },
                {
                  "name": "dovecot-imap-list-information-disclosure(26536)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26536"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-2414",
        "datePublished": "2006-05-16T10:00:00.000Z",
        "dateReserved": "2006-05-15T00:00:00.000Z",
        "dateUpdated": "2024-08-07T17:51:04.513Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-0730 (GCVE-0-2006-0730)

    Vulnerability from nvd – Published: 2006-02-16 11:00 – Updated: 2024-08-07 16:48
    VLAI
    Summary
    Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) "potential hangs" in the APPEND command and "potential crashes" in (2) dovecot-auth and (3) imap/pop3-login. NOTE: vector 2 might be related to a double free vulnerability.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://secunia.com/advisories/18870 third-party-advisoryx_refsource_SECUNIA
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.vupen.com/english/advisories/2006/0549 vdb-entryx_refsource_VUPEN
    http://www.dovecot.org/list/dovecot/2006-February… mailing-listx_refsource_MLIST
    http://www.securityfocus.com/bid/16672 vdb-entryx_refsource_BID
    Date Public
    2006-02-08 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T16:48:55.375Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "18870",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/18870"
              },
              {
                "name": "dovecot-append-dos(24709)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24709"
              },
              {
                "name": "ADV-2006-0549",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/0549"
              },
              {
                "name": "[Dovecot] 20060208 1.0beta3 released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.dovecot.org/list/dovecot/2006-February/011367.html"
              },
              {
                "name": "16672",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/16672"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-02-08T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) \"potential hangs\" in the APPEND command and \"potential crashes\" in (2) dovecot-auth and (3) imap/pop3-login.  NOTE: vector 2 might be related to a double free vulnerability."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-19T15:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "18870",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/18870"
            },
            {
              "name": "dovecot-append-dos(24709)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24709"
            },
            {
              "name": "ADV-2006-0549",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/0549"
            },
            {
              "name": "[Dovecot] 20060208 1.0beta3 released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.dovecot.org/list/dovecot/2006-February/011367.html"
            },
            {
              "name": "16672",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/16672"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-0730",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) \"potential hangs\" in the APPEND command and \"potential crashes\" in (2) dovecot-auth and (3) imap/pop3-login.  NOTE: vector 2 might be related to a double free vulnerability."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "18870",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/18870"
                },
                {
                  "name": "dovecot-append-dos(24709)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24709"
                },
                {
                  "name": "ADV-2006-0549",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/0549"
                },
                {
                  "name": "[Dovecot] 20060208 1.0beta3 released",
                  "refsource": "MLIST",
                  "url": "http://www.dovecot.org/list/dovecot/2006-February/011367.html"
                },
                {
                  "name": "16672",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/16672"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-0730",
        "datePublished": "2006-02-16T11:00:00.000Z",
        "dateReserved": "2006-02-16T00:00:00.000Z",
        "dateUpdated": "2024-08-07T16:48:55.375Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-5973 (GCVE-0-2006-5973)

    Vulnerability from cvelistv5 – Published: 2006-11-20 19:00 – Updated: 2024-08-07 20:12
    VLAI
    Summary
    Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://dovecot.org/pipermail/dovecot-news/2006-No… mailing-listx_refsource_MLIST
    http://www.ubuntu.com/usn/usn-387-1 vendor-advisoryx_refsource_UBUNTU
    http://secunia.com/advisories/23150 third-party-advisoryx_refsource_SECUNIA
    http://www.novell.com/linux/security/advisories/2… vendor-advisoryx_refsource_SUSE
    http://secunia.com/advisories/23007 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/23172 third-party-advisoryx_refsource_SECUNIA
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/archive/1/452081/100… mailing-listx_refsource_BUGTRAQ
    http://dovecot.org/list/dovecot-news/2006-Novembe… mailing-listx_refsource_MLIST
    http://secunia.com/advisories/23213 third-party-advisoryx_refsource_SECUNIA
    http://securitytracker.com/id?1017288 vdb-entryx_refsource_SECTRACK
    http://www.vupen.com/english/advisories/2006/4614 vdb-entryx_refsource_VUPEN
    http://www.securityfocus.com/bid/21183/info vdb-entryx_refsource_BID
    https://issues.rpath.com/browse/RPL-802 x_refsource_CONFIRM
    Date Public
    2006-11-19 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T20:12:31.341Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "[Dovecot-news] 20091119 1.0.rc15 released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://dovecot.org/pipermail/dovecot-news/2006-November/000024.html"
              },
              {
                "name": "USN-387-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/usn-387-1"
              },
              {
                "name": "23150",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23150"
              },
              {
                "name": "SUSE-SA:2006:073",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://www.novell.com/linux/security/advisories/2006_73_mono.html"
              },
              {
                "name": "23007",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23007"
              },
              {
                "name": "23172",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23172"
              },
              {
                "name": "dovecot-indexcache-bo(30433)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30433"
              },
              {
                "name": "20061119 Dovecot IMAP/POP3 server: Off-by-one buffer overflow",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/452081/100/0/threaded"
              },
              {
                "name": "[Dovecot-news] 20061119 Security hole #2: Off-by-one buffer overflow with mmap_disable=yes",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://dovecot.org/list/dovecot-news/2006-November/000023.html"
              },
              {
                "name": "23213",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23213"
              },
              {
                "name": "1017288",
                "tags": [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
                  "x_transferred"
                ],
                "url": "http://securitytracker.com/id?1017288"
              },
              {
                "name": "ADV-2006-4614",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/4614"
              },
              {
                "name": "21183",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/21183/info"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://issues.rpath.com/browse/RPL-802"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-11-19T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to \"yes,\" allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-17T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "[Dovecot-news] 20091119 1.0.rc15 released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://dovecot.org/pipermail/dovecot-news/2006-November/000024.html"
            },
            {
              "name": "USN-387-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/usn-387-1"
            },
            {
              "name": "23150",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23150"
            },
            {
              "name": "SUSE-SA:2006:073",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://www.novell.com/linux/security/advisories/2006_73_mono.html"
            },
            {
              "name": "23007",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23007"
            },
            {
              "name": "23172",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23172"
            },
            {
              "name": "dovecot-indexcache-bo(30433)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30433"
            },
            {
              "name": "20061119 Dovecot IMAP/POP3 server: Off-by-one buffer overflow",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/452081/100/0/threaded"
            },
            {
              "name": "[Dovecot-news] 20061119 Security hole #2: Off-by-one buffer overflow with mmap_disable=yes",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://dovecot.org/list/dovecot-news/2006-November/000023.html"
            },
            {
              "name": "23213",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23213"
            },
            {
              "name": "1017288",
              "tags": [
                "vdb-entry",
                "x_refsource_SECTRACK"
              ],
              "url": "http://securitytracker.com/id?1017288"
            },
            {
              "name": "ADV-2006-4614",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/4614"
            },
            {
              "name": "21183",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/21183/info"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://issues.rpath.com/browse/RPL-802"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-5973",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to \"yes,\" allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "[Dovecot-news] 20091119 1.0.rc15 released",
                  "refsource": "MLIST",
                  "url": "http://dovecot.org/pipermail/dovecot-news/2006-November/000024.html"
                },
                {
                  "name": "USN-387-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/usn-387-1"
                },
                {
                  "name": "23150",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23150"
                },
                {
                  "name": "SUSE-SA:2006:073",
                  "refsource": "SUSE",
                  "url": "http://www.novell.com/linux/security/advisories/2006_73_mono.html"
                },
                {
                  "name": "23007",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23007"
                },
                {
                  "name": "23172",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23172"
                },
                {
                  "name": "dovecot-indexcache-bo(30433)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30433"
                },
                {
                  "name": "20061119 Dovecot IMAP/POP3 server: Off-by-one buffer overflow",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/452081/100/0/threaded"
                },
                {
                  "name": "[Dovecot-news] 20061119 Security hole #2: Off-by-one buffer overflow with mmap_disable=yes",
                  "refsource": "MLIST",
                  "url": "http://dovecot.org/list/dovecot-news/2006-November/000023.html"
                },
                {
                  "name": "23213",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23213"
                },
                {
                  "name": "1017288",
                  "refsource": "SECTRACK",
                  "url": "http://securitytracker.com/id?1017288"
                },
                {
                  "name": "ADV-2006-4614",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/4614"
                },
                {
                  "name": "21183",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/21183/info"
                },
                {
                  "name": "https://issues.rpath.com/browse/RPL-802",
                  "refsource": "CONFIRM",
                  "url": "https://issues.rpath.com/browse/RPL-802"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-5973",
        "datePublished": "2006-11-20T19:00:00.000Z",
        "dateReserved": "2006-11-20T00:00:00.000Z",
        "dateUpdated": "2024-08-07T20:12:31.341Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-2414 (GCVE-0-2006-2414)

    Vulnerability from cvelistv5 – Published: 2006-05-16 10:00 – Updated: 2024-08-07 17:51
    VLAI
    Summary
    Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the (1) LIST or (2) DELETE IMAP command.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.debian.org/security/2006/dsa-1080 vendor-advisoryx_refsource_DEBIAN
    http://www.dovecot.org/list/dovecot-news/2006-May… x_refsource_MISC
    http://www.vupen.com/english/advisories/2006/2013 vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/20315 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/17961 vdb-entryx_refsource_BID
    http://securityreason.com/securityalert/913 third-party-advisoryx_refsource_SREASON
    http://secunia.com/advisories/20308 third-party-advisoryx_refsource_SECUNIA
    http://dovecot.org/list/dovecot-cvs/2006-May/0055… x_refsource_CONFIRM
    http://www.securityfocus.com/archive/1/433878/100… mailing-listx_refsource_BUGTRAQ
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    Date Public
    2006-05-12 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T17:51:04.513Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "DSA-1080",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
                  "x_transferred"
                ],
                "url": "http://www.debian.org/security/2006/dsa-1080"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.dovecot.org/list/dovecot-news/2006-May/000006.html"
              },
              {
                "name": "ADV-2006-2013",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/2013"
              },
              {
                "name": "20315",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/20315"
              },
              {
                "name": "17961",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/17961"
              },
              {
                "name": "913",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/913"
              },
              {
                "name": "20308",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/20308"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://dovecot.org/list/dovecot-cvs/2006-May/005563.html"
              },
              {
                "name": "20060512 Dovecot IMAP: Mailbox names list disclosure with mboxes",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/433878/100/0/threaded"
              },
              {
                "name": "dovecot-imap-list-information-disclosure(26536)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26536"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-05-12T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via \"..\" sequences in the (1) LIST or (2) DELETE IMAP command."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-18T14:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "DSA-1080",
              "tags": [
                "vendor-advisory",
                "x_refsource_DEBIAN"
              ],
              "url": "http://www.debian.org/security/2006/dsa-1080"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.dovecot.org/list/dovecot-news/2006-May/000006.html"
            },
            {
              "name": "ADV-2006-2013",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/2013"
            },
            {
              "name": "20315",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/20315"
            },
            {
              "name": "17961",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/17961"
            },
            {
              "name": "913",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/913"
            },
            {
              "name": "20308",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/20308"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://dovecot.org/list/dovecot-cvs/2006-May/005563.html"
            },
            {
              "name": "20060512 Dovecot IMAP: Mailbox names list disclosure with mboxes",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/433878/100/0/threaded"
            },
            {
              "name": "dovecot-imap-list-information-disclosure(26536)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26536"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-2414",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via \"..\" sequences in the (1) LIST or (2) DELETE IMAP command."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "DSA-1080",
                  "refsource": "DEBIAN",
                  "url": "http://www.debian.org/security/2006/dsa-1080"
                },
                {
                  "name": "http://www.dovecot.org/list/dovecot-news/2006-May/000006.html",
                  "refsource": "MISC",
                  "url": "http://www.dovecot.org/list/dovecot-news/2006-May/000006.html"
                },
                {
                  "name": "ADV-2006-2013",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/2013"
                },
                {
                  "name": "20315",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/20315"
                },
                {
                  "name": "17961",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/17961"
                },
                {
                  "name": "913",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/913"
                },
                {
                  "name": "20308",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/20308"
                },
                {
                  "name": "http://dovecot.org/list/dovecot-cvs/2006-May/005563.html",
                  "refsource": "CONFIRM",
                  "url": "http://dovecot.org/list/dovecot-cvs/2006-May/005563.html"
                },
                {
                  "name": "20060512 Dovecot IMAP: Mailbox names list disclosure with mboxes",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/433878/100/0/threaded"
                },
                {
                  "name": "dovecot-imap-list-information-disclosure(26536)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26536"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-2414",
        "datePublished": "2006-05-16T10:00:00.000Z",
        "dateReserved": "2006-05-15T00:00:00.000Z",
        "dateUpdated": "2024-08-07T17:51:04.513Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-0730 (GCVE-0-2006-0730)

    Vulnerability from cvelistv5 – Published: 2006-02-16 11:00 – Updated: 2024-08-07 16:48
    VLAI
    Summary
    Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) "potential hangs" in the APPEND command and "potential crashes" in (2) dovecot-auth and (3) imap/pop3-login. NOTE: vector 2 might be related to a double free vulnerability.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://secunia.com/advisories/18870 third-party-advisoryx_refsource_SECUNIA
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.vupen.com/english/advisories/2006/0549 vdb-entryx_refsource_VUPEN
    http://www.dovecot.org/list/dovecot/2006-February… mailing-listx_refsource_MLIST
    http://www.securityfocus.com/bid/16672 vdb-entryx_refsource_BID
    Date Public
    2006-02-08 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T16:48:55.375Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "18870",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/18870"
              },
              {
                "name": "dovecot-append-dos(24709)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24709"
              },
              {
                "name": "ADV-2006-0549",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/0549"
              },
              {
                "name": "[Dovecot] 20060208 1.0beta3 released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.dovecot.org/list/dovecot/2006-February/011367.html"
              },
              {
                "name": "16672",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/16672"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-02-08T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) \"potential hangs\" in the APPEND command and \"potential crashes\" in (2) dovecot-auth and (3) imap/pop3-login.  NOTE: vector 2 might be related to a double free vulnerability."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-19T15:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "18870",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/18870"
            },
            {
              "name": "dovecot-append-dos(24709)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24709"
            },
            {
              "name": "ADV-2006-0549",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/0549"
            },
            {
              "name": "[Dovecot] 20060208 1.0beta3 released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.dovecot.org/list/dovecot/2006-February/011367.html"
            },
            {
              "name": "16672",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/16672"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-0730",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) \"potential hangs\" in the APPEND command and \"potential crashes\" in (2) dovecot-auth and (3) imap/pop3-login.  NOTE: vector 2 might be related to a double free vulnerability."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "18870",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/18870"
                },
                {
                  "name": "dovecot-append-dos(24709)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24709"
                },
                {
                  "name": "ADV-2006-0549",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/0549"
                },
                {
                  "name": "[Dovecot] 20060208 1.0beta3 released",
                  "refsource": "MLIST",
                  "url": "http://www.dovecot.org/list/dovecot/2006-February/011367.html"
                },
                {
                  "name": "16672",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/16672"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-0730",
        "datePublished": "2006-02-16T11:00:00.000Z",
        "dateReserved": "2006-02-16T00:00:00.000Z",
        "dateUpdated": "2024-08-07T16:48:55.375Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }