CVE-2007-2231
EPSS 1.5%dovecot - directory traversal
發布日:2007/4/25修改日:2026/4/28
也稱為:DEBIAN-CVE-2007-2231
描述
Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.
受影響套件(2)
- Debian/dovecotfrom 0, < 1.0.rc29-1
- Debian/dovecotfrom 0, < 1.0.rc15-2etch1