Test ID:	1.3.6.1.4.1.25623.1.0.58578
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1359-1)
Summary:	The remote host is missing an update for the Debian 'dovecot' package(s) announced via the DSA-1359-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'dovecot' package(s) announced via the DSA-1359-1 advisory. Vulnerability Insight: It was discovered that dovecot, a secure mail server that supports mbox and maildir mailboxes, when configured to use non-system-user spools and compressed folders, may allow directory traversal in mailbox names. For the old stable distribution (sarge), this problem was not present. For the stable distribution (etch), this problem has been fixed in version 1.0.rc15-2etch1. For the unstable distribution (sid) this problem will be fixed soon. We recommend that you upgrade your dovecot package. Affected Software/OS: 'dovecot' package(s) on Debian 4. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2231 BugTraq ID: 23552 http://www.securityfocus.com/bid/23552 Bugtraq: 20070418 rPSA-2007-0074-1 dovecot (Google Search) http://www.securityfocus.com/archive/1/466168/100/0/threaded Debian Security Information: DSA-1359 (Google Search) http://www.debian.org/security/2007/dsa-1359 http://dovecot.org/list/dovecot-cvs/2007-March/008488.html http://dovecot.org/list/dovecot-news/2007-March/000038.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10995 http://www.redhat.com/support/errata/RHSA-2008-0297.html http://secunia.com/advisories/25072 http://secunia.com/advisories/30342 SuSE Security Announcement: SUSE-SR:2007:008 (Google Search) http://www.novell.com/linux/security/advisories/2007_8_sr.html http://www.ubuntu.com/usn/usn-487-1 http://www.vupen.com/english/advisories/2007/1452 XForce ISS Database: dovecot-mboxstorage-directory-traversal(34082) https://exchange.xforce.ibmcloud.com/vulnerabilities/34082
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.