CVE

Id
25588  
CVE No.
CVE-2007-2231  
Status
Candidate  
Description
Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255650 25588 CVE-2007-2231 BUGTRAQ:20070418 rPSA-2007-0074-1 dovecot  View
255651 25588 CVE-2007-2231 URL:http://www.securityfocus.com/archive/1/archive/1/466168/100/0/threaded  View
255652 25588 CVE-2007-2231 MLIST:[dovecot-cvs] 20070330 dovecot/src/lib-storage/index/mbox mbox-storage.c, 1.145.2.14, 1.145.2.15  View
255653 25588 CVE-2007-2231 URL:http://dovecot.org/list/dovecot-cvs/2007-March/008488.html  View
255654 25588 CVE-2007-2231 MLIST:[dovecot-news] 20070330 Security hole #3: zlib plugin allows opening any gziped mboxes  View
255655 25588 CVE-2007-2231 URL:http://dovecot.org/list/dovecot-news/2007-March/000038.html  View
255656 25588 CVE-2007-2231 CONFIRM:http://dovecot.org/doc/NEWS  View
255657 25588 CVE-2007-2231 DEBIAN:DSA-1359  View
255658 25588 CVE-2007-2231 URL:http://www.debian.org/security/2007/dsa-1359  View
255659 25588 CVE-2007-2231 REDHAT:RHSA-2008:0297  View
255660 25588 CVE-2007-2231 URL:http://www.redhat.com/support/errata/RHSA-2008-0297.html  View
255661 25588 CVE-2007-2231 SUSE:SUSE-SR:2007:008  View
255662 25588 CVE-2007-2231 URL:http://www.novell.com/linux/security/advisories/2007_8_sr.html  View
255663 25588 CVE-2007-2231 UBUNTU:USN-487-1  View
255664 25588 CVE-2007-2231 URL:http://www.ubuntu.com/usn/usn-487-1  View
255665 25588 CVE-2007-2231 BID:23552  View
255666 25588 CVE-2007-2231 URL:http://www.securityfocus.com/bid/23552  View
255667 25588 CVE-2007-2231 OVAL:oval:org.mitre.oval:def:10995  View
255668 25588 CVE-2007-2231 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10995  View
255669 25588 CVE-2007-2231 SECUNIA:30342  View
255670 25588 CVE-2007-2231 URL:http://secunia.com/advisories/30342  View
255671 25588 CVE-2007-2231 VUPEN:ADV-2007-1452  View
255672 25588 CVE-2007-2231 URL:http://www.vupen.com/english/advisories/2007/1452  View
255673 25588 CVE-2007-2231 SECUNIA:25072  View
255674 25588 CVE-2007-2231 URL:http://secunia.com/advisories/25072  View
255675 25588 CVE-2007-2231 XF:dovecot-mboxstorage-directory-traversal(34082)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53190 JVNDB-2007-001882 Cosign の cosign-bin/cosign.cgi における任意ユーザとして不正な操作を実行される脆弱性 Cosign の cosign-bin/cosign.cgi には、任意ユーザとして不正な操作を実行される脆弱性が存在します。 CVE-2007-2233 25588 6.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001882.html  View