CVE-2007-2231
- State
- Published
- Severity
- Not scored
- Published
- Apr 25, 2007
- Updated
- Aug 7, 2024
- Reserved
- Apr 25, 2007
Description
Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-487-1vendor-advisory
- 30342third-party-advisory
- RHSA-2008:0297vendor-advisory
- 23552vdb-entry
- DSA-1359vendor-advisory
- http://dovecot.org/doc/NEWS
- [dovecot-cvs] 20070330 dovecot/src/lib-storage/index/mbox mbox-storage.c, 1.145.2.14, 1.145.2.15mailing-list
- oval:org.mitre.oval:def:10995vdb-entrysignature
- dovecot-mboxstorage-directory-traversal(34082)vdb-entry
- SUSE-SR:2007:008vendor-advisory
- ADV-2007-1452vdb-entry
- [dovecot-news] 20070330 Security hole #3: zlib plugin allows opening any gziped mboxesmailing-list
- 25072third-party-advisory
- 20070418 rPSA-2007-0074-1 dovecotmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.