VULNERABILITY INTELLIGENCE
CVE-2006-2414
CVSS score5 MEDIUM
EPSS probability2.39%
CISA KEVNot currently listed
Published2006-05-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the (1) LIST or (2) DELETE IMAP command.