← Database

CVE-2007-2231

MEDIUM CVSS: 4.3 Published: 2007-04-25 Modified: 2026-06-16

Description

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.

Affected Platforms

Dovecot Dovecot

Weakness Type

NVD-CWE-Other

References