CVE-2006-2414

published 2006-05-16

CVE-2006-2414: Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain…

Priority P4 23 medium 5 CVSS 2.0

AV N AC L Au N C P I N A N

Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the (1) LIST or (2) DELETE IMAP command.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	dovecot	< dovecot 1.0.beta8-1 (bookworm)	dovecot 1.0.beta8-1 (bookworm)
dovecot	dovecot	>= 0 < 1.0.beta8-1	1.0.beta8-1
dovecot	dovecot	>= 0 < 1.0.beta8-1	1.0.beta8-1
dovecot	dovecot	>= 0 < 1.0.beta8-1	1.0.beta8-1
dovecot	dovecot	>= 0 < 1.0.beta8-1	1.0.beta8-1
timo_sirainen	dovecot	—	—
timo_sirainen	dovecot	—	—
timo_sirainen	dovecot	—	—
timo_sirainen	dovecot	—	—

CVSS provenance

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

osv 5.0 MEDIUM

vendor_debian 5.0 LOW

vendor_redhat 5.0 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.