• info
• discussion
• exploit
• solution
• references

Dovecot Authentication Cache Security Bypass Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for more information.


Dovecot Dovecot 1.0.RC11

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0.RC15

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0.RC14

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0.RC12

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0.RC13

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0.3

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0.4

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0.5

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0.6

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0.7

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0.8

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz

Dovecot Dovecot 1.0.9

• Dovecot dovecot-1.0.10.tar.gz
  http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz