GCVE - cpe:2.3:a:dovecot:dovecot:1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dovecot:dovecot:1.1:*:*:*:*:*:*:*

part: a version: 1.1 update: *

Vendor	Dovecot (`4878954c-d284-58ab-9fab-9fdb4dcb62a5`)
Product	Dovecot (`69315d6c-8387-56ce-bab4-fd11daf3f0a0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/dovecot-core`	purl2cpe	2026-06-01 10:18:22.008763
`pkg:deb/ubuntu/dovecot-core`	purl2cpe	2026-06-01 10:18:22.008766
`pkg:docker/dovecot/dovecot`	purl2cpe	2026-06-01 10:18:22.008768
`pkg:github/dovecot/core`	purl2cpe	2026-06-01 10:18:22.008769
`pkg:rpm/fedora/dovecot`	purl2cpe	2026-06-01 10:18:22.008771
`pkg:rpm/opensuse/dovecot-core`	purl2cpe	2026-06-01 10:18:22.008773

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3430`	vulnerable	2026-06-08 05:05:32.594740	Details available Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service (resource consumption) via an incomplete SSL/TLS handshake for an IMAP/POP3 connection. Published: 2014-05-14T19:00:00.000Z Updated: 2024-08-06T10:43:06.101Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2014/05/09/4 http://secunia.com/advisories/59051 http://www.openwall.com/lists/oss-security/2014/05/09/8 http://secunia.com/advisories/59537 http://advisories.mageia.org/MGASA-2014-0223.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3235`	vulnerable	2026-06-08 04:51:32.967308	Details available Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632. Published: 2009-09-17T10:00:00.000Z Updated: 2024-08-07T06:22:23.176Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/36377 https://exchange.xforce.ibmcloud.com/vulnerabilities/53248 http://secunia.com/advisories/36713 http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html http://dovecot.org/list/dovecot-news/2009-September/000135.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5301`	vulnerable	2026-06-08 04:50:50.712614	Details available Directory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1.2 allows remote attackers to read and modify arbitrary .sieve files via a ".." (dot dot) in a script name. Published: 2008-12-01T17:00:00.000Z Updated: 2024-08-07T10:49:12.314Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/46672 http://www.vupen.com/english/advisories/2008/3190 http://www.ubuntu.com/usn/USN-838-1 http://www.dovecot.org/list/dovecot/2008-November/035259.html http://secunia.com/advisories/32768	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4578`	vulnerable	2026-06-08 04:50:39.462268	Details available The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes. Published: 2008-10-15T20:00:00.000Z Updated: 2024-08-07T10:24:19.353Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32164 https://exchange.xforce.ibmcloud.com/vulnerabilities/45669 http://secunia.com/advisories/33149 http://www.vupen.com/english/advisories/2008/2745 http://www.securityfocus.com/bid/31587	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.