Total vulnerabilities in the database
The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes.
| Software | From | Fixed in |
|---|---|---|
| dovecot / dovecot | 1.0.6 | 1.0.6.x |
| dovecot / dovecot | 1.0.rc20 | 1.0.rc20.x |
| dovecot / dovecot | 1.0.beta2 | 1.0.beta2.x |
| dovecot / dovecot | 1.0.5 | 1.0.5.x |
| dovecot / dovecot | 1.0.beta5 | 1.0.beta5.x |
| dovecot / dovecot | 1.0 | 1.0.x |
| dovecot / dovecot | 1.0.rc15 | 1.0.rc15.x |
| dovecot / dovecot | 1.1 | 1.1.x |
| dovecot / dovecot | 1.0.rc19 | 1.0.rc19.x |
| dovecot / dovecot | 1.0.rc12 | 1.0.rc12.x |
| dovecot / dovecot | 1.0.beta4 | 1.0.beta4.x |
| dovecot / dovecot | - | 1.1.3.x |
| dovecot / dovecot | 1.0.12 | 1.0.12.x |
| dovecot / dovecot | 1.0.rc14 | 1.0.rc14.x |
| dovecot / dovecot | 1.0.beta6 | 1.0.beta6.x |
| dovecot / dovecot | 1.0.2 | 1.0.2.x |
| dovecot / dovecot | 1.0.beta9 | 1.0.beta9.x |
| dovecot / dovecot | 1.1.2 | 1.1.2.x |
| dovecot / dovecot | 1.0.rc8 | 1.0.rc8.x |
| dovecot / dovecot | 1.1-rc2 | 1.1-rc2.x |
| dovecot / dovecot | 1.0.rc2 | 1.0.rc2.x |
| dovecot / dovecot | 1.0.7 | 1.0.7.x |
| dovecot / dovecot | 1.0.rc25 | 1.0.rc25.x |
| dovecot / dovecot | 0.99.14 | 0.99.14.x |
| dovecot / dovecot | 1.0.beta8 | 1.0.beta8.x |
| dovecot / dovecot | 1.0.beta3 | 1.0.beta3.x |
| dovecot / dovecot | 1.0.rc16 | 1.0.rc16.x |
| dovecot / dovecot | 1.0.3 | 1.0.3.x |
| dovecot / dovecot | 1.0.rc9 | 1.0.rc9.x |
| dovecot / dovecot | 1.0.rc27 | 1.0.rc27.x |
| dovecot / dovecot | 1.0.beta1 | 1.0.beta1.x |
| dovecot / dovecot | 1.0.rc13 | 1.0.rc13.x |
| dovecot / dovecot | 1.0.8 | 1.0.8.x |
| dovecot / dovecot | 1.0.rc11 | 1.0.rc11.x |
| dovecot / dovecot | 1.0.4 | 1.0.4.x |
| dovecot / dovecot | 1.0.rc6 | 1.0.rc6.x |
| dovecot / dovecot | 1.0.rc26 | 1.0.rc26.x |
| dovecot / dovecot | 1.0.rc17 | 1.0.rc17.x |
| dovecot / dovecot | 1.0.rc3 | 1.0.rc3.x |
| dovecot / dovecot | 1.0.10 | 1.0.10.x |
| dovecot / dovecot | 1.0.9 | 1.0.9.x |
| dovecot / dovecot | 1.0.rc1 | 1.0.rc1.x |
| dovecot / dovecot | 1.0.rc21 | 1.0.rc21.x |
| dovecot / dovecot | 1.0.rc22 | 1.0.rc22.x |
| dovecot / dovecot | 0.99.13 | 0.99.13.x |
| dovecot / dovecot | 1.0.rc10 | 1.0.rc10.x |
| dovecot / dovecot | 1.1.1 | 1.1.1.x |
| dovecot / dovecot | 1.0.rc28 | 1.0.rc28.x |
| dovecot / dovecot | 1.0_rc29 | 1.0_rc29.x |
| dovecot / dovecot | 1.1.0 | 1.1.0.x |
| dovecot / dovecot | 1.0.rc7 | 1.0.rc7.x |
| dovecot / dovecot | 1.0.rc5 | 1.0.rc5.x |
| dovecot / dovecot | 1.0.rc18 | 1.0.rc18.x |
| dovecot / dovecot | 1.0.rc23 | 1.0.rc23.x |
| dovecot / dovecot | 1.0.beta7 | 1.0.beta7.x |
| dovecot / dovecot | 1.0.rc4 | 1.0.rc4.x |
| dovecot / dovecot | 1.0.rc24 | 1.0.rc24.x |