GCVE - cpe:2.3:a:dovecot:dovecot:0.99.13:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dovecot:dovecot:0.99.13:*:*:*:*:*:*:*

part: a version: 0.99.13 update: *

Vendor	Dovecot (`4878954c-d284-58ab-9fab-9fdb4dcb62a5`)
Product	Dovecot (`69315d6c-8387-56ce-bab4-fd11daf3f0a0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/dovecot-core`	purl2cpe	2026-06-01 10:18:21.883885
`pkg:deb/ubuntu/dovecot-core`	purl2cpe	2026-06-01 10:18:21.883887
`pkg:docker/dovecot/dovecot`	purl2cpe	2026-06-01 10:18:21.883889
`pkg:github/dovecot/core`	purl2cpe	2026-06-01 10:18:21.883891
`pkg:rpm/fedora/dovecot`	purl2cpe	2026-06-01 10:18:21.883893
`pkg:rpm/opensuse/dovecot-core`	purl2cpe	2026-06-01 10:18:21.883894

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-5301`	vulnerable	2026-06-08 04:50:50.706067	Details available Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name. Published: 2008-12-01T17:00:00.000Z Updated: 2024-08-07T10:49:12.314Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/46672 http://www.vupen.com/english/advisories/2008/3190 http://www.ubuntu.com/usn/USN-838-1 http://www.dovecot.org/list/dovecot/2008-November/035259.html http://secunia.com/advisories/32768	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4578`	vulnerable	2026-06-08 04:50:39.436519	Details available The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes. Published: 2008-10-15T20:00:00.000Z Updated: 2024-08-07T10:24:19.353Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32164 https://exchange.xforce.ibmcloud.com/vulnerabilities/45669 http://secunia.com/advisories/33149 http://www.vupen.com/english/advisories/2008/2745 http://www.securityfocus.com/bid/31587	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1199`	vulnerable	2026-06-08 04:50:19.615543	Details available Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack. Published: 2008-03-06T21:00:00.000Z Updated: 2024-08-07T08:17:33.897Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-200803-25.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10739 http://www.dovecot.org/list/dovecot-news/2008-March/000061.html http://secunia.com/advisories/29557 http://www.securityfocus.com/archive/1/489133/100/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.