CVE-2008-1218

no score yetEPSS 7.3%

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skip_password_check field to be specified.

EPSS: 7.3% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-255
Published: 2008-03-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dovecot:dovecot

References

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html
http://secunia.com/advisories/29226
http://secunia.com/advisories/29295
http://secunia.com/advisories/29364
http://secunia.com/advisories/29385

Check your stack JSON