CVE-2008-1218

N/A Unknown
Published: March 10, 2008 Modified: April 23, 2026
View on NVD

Description

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skip_password_check field to be specified.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html
Source: cve@mitre.org
http://secunia.com/advisories/29226
Source: cve@mitre.org
http://secunia.com/advisories/29295
Source: cve@mitre.org
http://secunia.com/advisories/29364
Source: cve@mitre.org
http://secunia.com/advisories/29385
Source: cve@mitre.org
http://secunia.com/advisories/29396
Source: cve@mitre.org
http://secunia.com/advisories/29557
Source: cve@mitre.org
http://secunia.com/advisories/32151
Source: cve@mitre.org
http://security.gentoo.org/glsa/glsa-200803-25.xml
Source: cve@mitre.org
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0108
Source: cve@mitre.org
http://www.debian.org/security/2008/dsa-1516
Source: cve@mitre.org
http://www.dovecot.org/list/dovecot-news/2008-March/000064.html
Source: cve@mitre.org
http://www.dovecot.org/list/dovecot-news/2008-March/000065.html
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/489481/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/28181
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/41085
Source: cve@mitre.org
https://issues.rpath.com/browse/RPL-2341
Source: cve@mitre.org
https://usn.ubuntu.com/593-1/
Source: cve@mitre.org
https://www.exploit-db.com/exploits/5257
Source: cve@mitre.org
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00358.html
Source: cve@mitre.org
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00381.html
Source: cve@mitre.org
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/29226
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/29295
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/29364
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/29385
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/29396
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/29557
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/32151
Source: af854a3a-2127-422b-91ae-364da2661108
http://security.gentoo.org/glsa/glsa-200803-25.xml
Source: af854a3a-2127-422b-91ae-364da2661108
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0108
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2008/dsa-1516
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.dovecot.org/list/dovecot-news/2008-March/000064.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.dovecot.org/list/dovecot-news/2008-March/000065.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/489481/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/28181
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/41085
Source: af854a3a-2127-422b-91ae-364da2661108
https://issues.rpath.com/browse/RPL-2341
Source: af854a3a-2127-422b-91ae-364da2661108
https://usn.ubuntu.com/593-1/
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.exploit-db.com/exploits/5257
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00358.html
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00381.html
Source: af854a3a-2127-422b-91ae-364da2661108

42 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
18.7%
95th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-255

Affected Vendors

dovecot

Related CVEs

CVE-2026-6222 5.3
CVE-2026-40003 5.1
CVE-2026-44597 3.7
CVE-2026-6278 N/A
CVE-2026-41484 5.3