CVE-2008-1218
Medium
Description
Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skip_password_check field to be specified.
SeverityMedium
CVSS6.8
Exploit probability—
ProductDovecot
PublishedMar 10, 2008
First seenMar 10, 2008
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dovecot dovecot | v ≤ 1.0.12, v ≤ 1.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.