Test ID:	1.3.6.1.4.1.25623.1.0.114171
Category:	General
Title:	Dovecot 2.0.x < 2.0.13 Directory Traversal Vulnerability
Summary:	Dovecot is prone to a directory traversal vulnerability.
Description:	Summary: Dovecot is prone to a directory traversal vulnerability. Vulnerability Insight: Script-login does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script. Affected Software/OS: Dovecot versions 2.0.x before 2.0.13. Solution: Update to version 2.0.13 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2167 BugTraq ID: 48003 http://www.securityfocus.com/bid/48003 http://dovecot.org/pipermail/dovecot/2011-May/059085.html http://openwall.com/lists/oss-security/2011/05/18/4 RedHat Security Advisories: RHSA-2013:0520 http://rhn.redhat.com/errata/RHSA-2013-0520.html http://secunia.com/advisories/52311 XForce ISS Database: dovecot-scriptlogin-dir-traversal(67674) https://exchange.xforce.ibmcloud.com/vulnerabilities/67674
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.