Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-666-1: Dovecot vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-666-1: Dovecot vulnerability
# 1  
Old 11-07-2008
USN-666-1: Dovecot vulnerability
Referenced CVEs:
CVE-2008-4907


Description:
===========================================================Ubuntu Security Notice USN-666-1 November 07, 2008dovecot vulnerabilityCVE-2008-4907===========================================================A security issue affects the following Ubuntu releases:Ubuntu 8.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 8.10: dovecot-imapd 1:1.1.4-0ubuntu1.2In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:It was discovered that certain email headers were not correctly handledby Dovecot. If a remote attacker sent a specially crafted email to auser with a mailbox managed by Dovecot, that user's mailbox would becomeinaccessible through Dovecot, leading to a denial of service.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

doveadm-dump

DOVEADM-DUMP(1) 						      Dovecot							   DOVEADM-DUMP(1)

NAME

       doveadm-dump - Dump the content of Dovecot's binary mailbox index/log

SYNOPSIS

       doveadm [-Dv] dump [-t type] path

DESCRIPTION

       Dovecot	uses  several  binary  index  and log files in order to improve performance for accessing mails. For some mailbox formats, such as
       sdbox and mdbox, the index files are part of the format itself.	For details about index files, see  also:  http://wiki2.dovecot.org/Index-
       Files

       doveadm	dump  is  used	to show the contents of those mailbox index/log files, in human readable format. This is mainly useful for Dovecot
       developers when debugging some problem.

OPTIONS

       Global doveadm(1) options:

       -D     Enables verbosity and debug messages.

       -v     Enables verbosity, including progress counter.

       Command specific options:

       -t type
	      the file type of the file to be dumped.  If the type was omitted, doveadm(1) tries to detect the type of path.  type can be:

	      dbox	  => m.n (sdbox or mdbox mailbox file)

	      index	  => dovecot.index, dovecot.map.index

	      log	  => dovecot.index.log, dovecot.map.index.log

	      mailboxlog  => dovecot.mailbox.log

	      thread	  => dovecot.index.thread

ARGUMENTS

       path   The path to the corresponding dbox storage, index or log file.  If only a directory is specified, doveadm tries to detect  the  type
	      of files under it and dumps them.

EXAMPLE

       Look at the contents of a mailbox's index:

       doveadm dump ~/Maildir/.work/

REPORTING BUGS

       Report  bugs,  including doveconf -n output, to the Dovecot Mailing List <dovecot@dovecot.org>.	Information about reporting bugs is avail-
       able at: http://dovecot.org/bugreport.html

SEE ALSO

       doveadm(1)

Dovecot v2.1							    2012-02-21							   DOVEADM-DUMP(1)