<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: timo sirainen</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-5973: Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index file</title><link>https://patchthecve.com/cve/CVE-2006-5973.html</link><guid>https://patchthecve.com/cve/CVE-2006-5973.html</guid><pubDate>Tue, 16 Jun 2026 22:32:14 +0000</pubDate><description>MEDIUM 5.0: Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to &quot;yes,&quot; allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.</description></item><item><title>CVE-2006-2414: Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and direct</title><link>https://patchthecve.com/cve/CVE-2006-2414.html</link><guid>https://patchthecve.com/cve/CVE-2006-2414.html</guid><pubDate>Tue, 16 Jun 2026 22:24:57 +0000</pubDate><description>MEDIUM 5.0: Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via &quot;..&quot; sequences in the (1) LIST or (2) DELETE IMAP command.</description></item><item><title>CVE-2006-0730: Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of se</title><link>https://patchthecve.com/cve/CVE-2006-0730.html</link><guid>https://patchthecve.com/cve/CVE-2006-0730.html</guid><pubDate>Tue, 16 Jun 2026 22:21:10 +0000</pubDate><description>MEDIUM 5.0: Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) &quot;potential hangs&quot; in the APPEND command and &quot;potential crashes&quot; in (2) dovecot-auth and (3) imap/pop3-login.  NOTE: ve</description></item></channel></rss>