Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skip_password_check field to be specified.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dovecot Tab 字符绕过口令检查漏洞和未授权访问漏洞
Vulnerability Description
Dovecot是一款开源的基于类Linux/UNIX系统的IMAP和POP3邮件服务器。 Dovecot对用户请求数据没有充分的检查过滤，远程攻击者可能利用此漏洞绕过验证获取非授权访问。 Dovecot的内部协议使用TAB字符作为分隔符，但未经转义便发送了口令，因此如果口令中包含有TAB字符的话，就可以添加新的内部字段。如果用户在登录时通过这种方式添加了skip_password_check字段的话，就可以绕过口令检查，获得非授权登录。
CVSS Information
N/A
Vulnerability Type
N/A