ID CVE-2010-3780
Summary Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions.
References
Vulnerable Configurations
  • Dovecot 1.2.0
    cpe:2.3:a:dovecot:dovecot:1.2.0
  • Dovecot 1.2.1
    cpe:2.3:a:dovecot:dovecot:1.2.1
  • Dovecot 1.2.2
    cpe:2.3:a:dovecot:dovecot:1.2.2
  • Dovecot 1.2.3
    cpe:2.3:a:dovecot:dovecot:1.2.3
  • Dovecot 1.2.4
    cpe:2.3:a:dovecot:dovecot:1.2.4
  • Dovecot 1.2.5
    cpe:2.3:a:dovecot:dovecot:1.2.5
  • Dovecot 1.2.6
    cpe:2.3:a:dovecot:dovecot:1.2.6
  • Dovecot 1.2.7
    cpe:2.3:a:dovecot:dovecot:1.2.7
  • Dovecot 1.2.7
    cpe:2.3:a:dovecot:dovecot:1.2.8
  • Dovecot 1.2.9
    cpe:2.3:a:dovecot:dovecot:1.2.9
  • Dovecot 1.2.10
    cpe:2.3:a:dovecot:dovecot:1.2.10
  • Dovecot 1.2.11
    cpe:2.3:a:dovecot:dovecot:1.2.11
  • Dovecot 1.2.12
    cpe:2.3:a:dovecot:dovecot:1.2.12
  • Dovecot 1.2.13
    cpe:2.3:a:dovecot:dovecot:1.2.13
  • Dovecot 1.2.14
    cpe:2.3:a:dovecot:dovecot:1.2.14
CVSS
Base: 4.0 (as of 07-10-2010 - 13:55)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE_INSTANCE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
nessus via4
  • NASL family Ubuntu Local Security Checks
    NASL id UBUNTU_USN-1059-1.NASL
    description It was discovered that the ACL plugin in Dovecot would incorrectly propagate ACLs to new mailboxes. A remote authenticated user could possibly read new mailboxes that were created with the wrong ACL. (CVE-2010-3304) It was discovered that the ACL plugin in Dovecot would incorrectly merge ACLs in certain circumstances. A remote authenticated user could possibly bypass intended access restrictions and gain access to mailboxes. (CVE-2010-3706, CVE-2010-3707) It was discovered that the ACL plugin in Dovecot would incorrectly grant the admin permission to owners of certain mailboxes. A remote authenticated user could possibly bypass intended access restrictions and gain access to mailboxes. (CVE-2010-3779) It was discovered that Dovecot incorrecly handled the simultaneous disconnect of a large number of sessions. A remote authenticated user could use this flaw to cause Dovecot to crash, resulting in a denial of service. (CVE-2010-3780). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-12-01
    plugin id 51900
    published 2011-02-08
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=51900
    title Ubuntu 10.04 LTS / 10.10 : dovecot vulnerabilities (USN-1059-1)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2011-0600.NASL
    description Updated dovecot packages that fix two security issues and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. Dovecot is an IMAP server for Linux, UNIX, and similar operating systems, primarily written with security in mind. A flaw was found in the way Dovecot handled SIGCHLD signals. If a large amount of IMAP or POP3 session disconnects caused the Dovecot master process to receive these signals rapidly, it could cause the master process to crash. (CVE-2010-3780) A flaw was found in the way Dovecot processed multiple Access Control Lists (ACL) defined for a mailbox. In some cases, Dovecot could fail to apply the more specific ACL entry, possibly resulting in more access being granted to the user than intended. (CVE-2010-3707) This update also adds the following enhancement : * This erratum upgrades Dovecot to upstream version 2.0.9, providing multiple fixes for the 'dsync' utility and improving overall performance. Refer to the '/usr/share/doc/dovecot-2.0.9/ChangeLog' file after installing this update for further information about the changes. (BZ#637056) Users of dovecot are advised to upgrade to these updated packages, which resolve these issues and add this enhancement. After installing the updated packages, the dovecot service will be restarted automatically.
    last seen 2019-02-21
    modified 2018-11-26
    plugin id 54597
    published 2011-05-20
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=54597
    title RHEL 6 : dovecot (RHSA-2011:0600)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20110519_DOVECOT_ON_SL6_X.NASL
    description Dovecot is an IMAP server for Linux, UNIX, and similar operating systems, primarily written with security in mind. A flaw was found in the way Dovecot handled SIGCHLD signals. If a large amount of IMAP or POP3 session disconnects caused the Dovecot master process to receive these signals rapidly, it could cause the master process to crash. (CVE-2010-3780) A flaw was found in the way Dovecot processed multiple Access Control Lists (ACL) defined for a mailbox. In some cases, Dovecot could fail to apply the more specific ACL entry, possibly resulting in more access being granted to the user than intended. (CVE-2010-3707) This update also adds the following enhancement : - This erratum upgrades Dovecot to upstream version 2.0.9, providing multiple fixes for the 'dsync' utility and improving overall performance. Refer to the '/usr/share/doc/dovecot-2.0.9/ChangeLog' file after installing this update for further information about the changes. (BZ#637056) Users of dovecot are advised to upgrade to these updated packages, which resolve these issues and add this enhancement. After installing the updated packages, the dovecot service will be restarted automatically.
    last seen 2019-02-21
    modified 2018-12-31
    plugin id 61039
    published 2012-08-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=61039
    title Scientific Linux Security Update : dovecot on SL6.x i386/x86_64
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-201110-04.NASL
    description The remote host is affected by the vulnerability described in GLSA-201110-04 (Dovecot: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Dovecot. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could exploit these vulnerabilities to cause the remote execution of arbitrary code, or a Denial of Service condition, to conduct directory traversal attacks, corrupt data, or disclose information. Workaround : There is no known workaround at this time.
    last seen 2019-02-21
    modified 2018-07-11
    plugin id 56446
    published 2011-10-11
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=56446
    title GLSA-201110-04 : Dovecot: Multiple vulnerabilities
  • NASL family Mandriva Local Security Checks
    NASL id MANDRIVA_MDVSA-2010-217.NASL
    description Multiple vulnerabilities was discovered and corrected in dovecot : Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.beta2 grants the admin permission to the owner of each mailbox in a non-public namespace, which might allow remote authenticated users to bypass intended access restrictions by changing the ACL of a mailbox, as demonstrated by a symlinked shared mailbox (CVE-2010-3779). Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service (master process outage) by simultaneously disconnecting many (1) IMAP or (2) POP3 sessions (CVE-2010-3780). The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configurations, which might allow remote attackers to read mailboxes that have unintended weak ACLs (CVE-2010-3304). plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving the private namespace of a user, which allows remote authenticated users to bypass intended access restrictions via a request to read or modify a mailbox (CVE-2010-3706). plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instead of a directive to replace the permissions granted by another ACL entry, in certain circumstances involving more specific entries that occur after less specific entries, which allows remote authenticated users to bypass intended access restrictions via a request to read or modify a mailbox (CVE-2010-3707). This advisory provides dovecot 1.2.15 which is not vulnerable to these issues
    last seen 2019-02-21
    modified 2018-07-19
    plugin id 50425
    published 2010-11-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=50425
    title Mandriva Linux Security Advisory : dovecot (MDVSA-2010:217)
redhat via4
advisories
bugzilla
id 641276
title CVE-2010-3780 Dovecot: Busy master process, receiving a lot of SIGCHLD signals rapidly while logging, could die
oval
AND
  • OR
    • comment Red Hat Enterprise Linux 6 Client is installed
      oval oval:com.redhat.rhsa:tst:20100842001
    • comment Red Hat Enterprise Linux 6 Server is installed
      oval oval:com.redhat.rhsa:tst:20100842002
    • comment Red Hat Enterprise Linux 6 Workstation is installed
      oval oval:com.redhat.rhsa:tst:20100842003
    • comment Red Hat Enterprise Linux 6 ComputeNode is installed
      oval oval:com.redhat.rhsa:tst:20100842004
  • OR
    • AND
      • comment dovecot is earlier than 1:2.0.9-2.el6
        oval oval:com.redhat.rhsa:tst:20110600005
      • comment dovecot is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20110600006
    • AND
      • comment dovecot-devel is earlier than 1:2.0.9-2.el6
        oval oval:com.redhat.rhsa:tst:20110600007
      • comment dovecot-devel is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20110600008
    • AND
      • comment dovecot-mysql is earlier than 1:2.0.9-2.el6
        oval oval:com.redhat.rhsa:tst:20110600009
      • comment dovecot-mysql is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20110600010
    • AND
      • comment dovecot-pgsql is earlier than 1:2.0.9-2.el6
        oval oval:com.redhat.rhsa:tst:20110600011
      • comment dovecot-pgsql is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20110600012
    • AND
      • comment dovecot-pigeonhole is earlier than 1:2.0.9-2.el6
        oval oval:com.redhat.rhsa:tst:20110600013
      • comment dovecot-pigeonhole is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20110600014
rhsa
id RHSA-2011:0600
released 2011-05-19
severity Moderate
title RHSA-2011:0600: dovecot security and enhancement update (Moderate)
rpms
  • dovecot-1:2.0.9-2.el6
  • dovecot-devel-1:2.0.9-2.el6
  • dovecot-mysql-1:2.0.9-2.el6
  • dovecot-pgsql-1:2.0.9-2.el6
  • dovecot-pigeonhole-1:2.0.9-2.el6
refmap via4
mandriva MDVSA-2010:217
mlist [dovecot] 20101002 v1.2.15 released
secunia 43220
ubuntu USN-1059-1
vupen
  • ADV-2010-2840
  • ADV-2011-0301
Last major update 26-08-2011 - 23:44
Published 06-10-2010 - 17:00
Back to Top