Vulnerabilities > Dovecot > Dovecot > 1.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-09-17 | CVE-2009-3235 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Dovecot Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632. | 7.5 |
| 2008-12-01 | CVE-2008-5301 | Path Traversal vulnerability in Dovecot Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name. | 6.4 |
| 2008-10-15 | CVE-2008-4578 | Permissions, Privileges, and Access Controls vulnerability in Dovecot The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes. | 5.0 |
| 2008-03-06 | CVE-2008-1199 | Configuration vulnerability in Dovecot Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack. | 4.4 |