NVD

Id
1178  
Name
CVE-2008-1218  
Description
Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skip_password_check field to be specified.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-03-10  
Modified Date
2011-03-07  
Seq
2008-1218  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
7347 1178 CVE-2008-1218 SUSE-SR:2008:020  View
7348 1178 CVE-2008-1218 GLSA-200803-25  View
7349 1178 CVE-2008-1218 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0108  View
7350 1178 CVE-2008-1218 DSA-1516  View
7351 1178 CVE-2008-1218 [Dovecot-news] 20080309 Security hole #6: Some passdbs allowed users to log in without a valid password  View
7352 1178 CVE-2008-1218 [Dovecot-news] 20080309 v1.0.13 and v1.1.rc3 released  View
7353 1178 CVE-2008-1218 5257  View
7354 1178 CVE-2008-1218 20080312 rPSA-2008-0108-1 dovecot  View
7355 1178 CVE-2008-1218 28181  View
7356 1178 CVE-2008-1218 USN-593-1  View
7357 1178 CVE-2008-1218 dovecot-tab-authentication-bypass(41085)  View
7358 1178 CVE-2008-1218 https://issues.rpath.com/browse/RPL-2341  View
7359 1178 CVE-2008-1218 FEDORA-2008-2464  View
7360 1178 CVE-2008-1218 FEDORA-2008-2475  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47509 JVNDB-2008-002819 Dovecot におけるパスワードチェックを回避される脆弱性 Dovecot には、blocking passdbs を使用している際、パスワードチェックを回避される脆弱性が存在します。 CVE-2008-1218 31331 CVE-2008-1218 1178 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002819.html 2008-03-09 2012-06-26 View