CVE-2008-1218
Last modified
CVE-2008-1218 is a vulnerability of currently unknown severity. Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skip_password_check field to be specified.. EPSS estimates a 7.34% chance of exploitation in the next 30 days.
Description
Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skip_password_check field to be specified.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Dovecot | Dovecot | <= 1.0.12 | — |
| Dovecot | Dovecot | <= 1.1 | Rc2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-1218?
How severe is CVE-2008-1218?
How do I fix CVE-2008-1218?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-1212Cross-site scripting (XSS) vulnerability in set_permissions.…
- CVE-2008-1213Cross-site scripting (XSS) vulnerability in Numara FootPrint…
- CVE-2008-1214MRcgi/MRProcessIncomingForms.pl in Numara FootPrints 8.1 on …
- CVE-2008-1215Stack-based buffer overflow in the command_Expand_Interpret …
- CVE-2008-1216IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, do…
- CVE-2008-1217Unspecified vulnerability in nlnotes.dll in the client in IB…
- CVE-2008-1219SQL injection vulnerability in the Kutub-i Sitte (KutubiSitt…
- CVE-2008-1220SQL injection vulnerability in the 4nChat 0.91 module for PH…
- CVE-2008-1221Absolute path traversal vulnerability in the FTP server in M…
- CVE-2008-1222Cross-site scripting (XSS) vulnerability in Dokeos 1.8.4 bef…
- CVE-2008-1223Unspecified vulnerability in Dokeos 1.8.4 before SP3 allows …
- CVE-2008-1224Cross-site scripting (XSS) vulnerability in account.php in B…
Are you affected by CVE-2008-1218?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST