GCVE - cpe:2.3:a:dovecot:dovecot:1.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dovecot:dovecot:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

Vendor	Dovecot (`4878954c-d284-58ab-9fab-9fdb4dcb62a5`)
Product	Dovecot (`69315d6c-8387-56ce-bab4-fd11daf3f0a0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/dovecot-core`	purl2cpe	2026-06-01 10:18:21.898397
`pkg:deb/ubuntu/dovecot-core`	purl2cpe	2026-06-01 10:18:21.898400
`pkg:docker/dovecot/dovecot`	purl2cpe	2026-06-01 10:18:21.898402
`pkg:github/dovecot/core`	purl2cpe	2026-06-01 10:18:21.898403
`pkg:rpm/fedora/dovecot`	purl2cpe	2026-06-01 10:18:21.898405
`pkg:rpm/opensuse/dovecot-core`	purl2cpe	2026-06-01 10:18:21.898407

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-3235`	vulnerable	2026-06-08 04:51:32.966271	Details available Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632. Published: 2009-09-17T10:00:00.000Z Updated: 2024-08-07T06:22:23.176Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/36377 https://exchange.xforce.ibmcloud.com/vulnerabilities/53248 http://secunia.com/advisories/36713 http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html http://dovecot.org/list/dovecot-news/2009-September/000135.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5301`	vulnerable	2026-06-08 04:50:50.707778	Details available Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name. Published: 2008-12-01T17:00:00.000Z Updated: 2024-08-07T10:49:12.314Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/46672 http://www.vupen.com/english/advisories/2008/3190 http://www.ubuntu.com/usn/USN-838-1 http://www.dovecot.org/list/dovecot/2008-November/035259.html http://secunia.com/advisories/32768	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4578`	vulnerable	2026-06-08 04:50:39.438115	Details available The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes. Published: 2008-10-15T20:00:00.000Z Updated: 2024-08-07T10:24:19.353Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32164 https://exchange.xforce.ibmcloud.com/vulnerabilities/45669 http://secunia.com/advisories/33149 http://www.vupen.com/english/advisories/2008/2745 http://www.securityfocus.com/bid/31587	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1199`	vulnerable	2026-06-08 04:50:19.617478	Details available Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack. Published: 2008-03-06T21:00:00.000Z Updated: 2024-08-07T08:17:33.897Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-200803-25.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10739 http://www.dovecot.org/list/dovecot-news/2008-March/000061.html http://secunia.com/advisories/29557 http://www.securityfocus.com/archive/1/489133/100/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.