Debian/dovecot: unknown

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing T

Action: Upgrade dovecot to 1:1.0.13-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-1218#Debian:13/dovecot
• https://security-tracker.debian.org/tracker/CVE-2008-1218

published 2008-03-10T23:44:00Z · modified 2026-10-23T17:47:28.580968276Z · JSON