Back to bug 754980
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Jan Lieskovsky | 2011-11-18 13:22:22 UTC | CC | mhlavink | |
| Jan Lieskovsky | 2011-11-18 13:25:40 UTC | Depends On | 754981 | |
| Jan Lieskovsky | 2011-11-18 13:46:35 UTC | Blocks | 754985 | |
| Vincent Danen | 2011-11-18 19:24:03 UTC | CC | vdanen | |
| Summary | dovecot: MITM due absent certificate's CN validation against requested remote server hostname | CVE-2011-4318 dovecot: MITM due absent certificate's CN validation against requested remote server hostname | ||
| Alias | CVE-2011-4318 | |||
| Tomas Hoger | 2012-03-06 14:17:31 UTC | Summary | CVE-2011-4318 dovecot: MITM due absent certificate's CN validation against requested remote server hostname | CVE-2011-4318 dovecot: proxy destination host name not checked against SSL certificate name |
| Stefan Cornelius | 2012-03-19 09:08:09 UTC | CC | scorneli | |
| Stefan Cornelius | 2012-03-19 09:37:45 UTC | Priority | medium | low |
| Whiteboard | impact=moderate,public=20111117,reported=20111117,source=gentoo,cvss2=5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N,rhel-4/dovecot=notaffected,rhel-5/dovecot=notaffected,rhel-6/dovecot=affected,fedora-all/dovecot=affected | impact=low,public=20111117,reported=20111117,source=gentoo,cvss2=5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N,rhel-4/dovecot=notaffected,rhel-5/dovecot=notaffected,rhel-6/dovecot=affected,fedora-all/dovecot=affected | ||
| Severity | medium | low | ||
| Stefan Cornelius | 2012-05-21 14:48:20 UTC | Whiteboard | impact=low,public=20111117,reported=20111117,source=gentoo,cvss2=5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N,rhel-4/dovecot=notaffected,rhel-5/dovecot=notaffected,rhel-6/dovecot=affected,fedora-all/dovecot=affected | impact=low,public=20111117,reported=20111117,source=gentoo,cvss2=5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N,rhel-4/dovecot=notaffected,rhel-5/dovecot=notaffected,rhel-6/dovecot=defer,fedora-all/dovecot=affected |
| Huzaifa S. Sidhpurwala | 2012-12-10 04:33:30 UTC | Whiteboard | impact=low,public=20111117,reported=20111117,source=gentoo,cvss2=5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N,rhel-4/dovecot=notaffected,rhel-5/dovecot=notaffected,rhel-6/dovecot=defer,fedora-all/dovecot=affected | impact=low,public=20111117,reported=20111117,source=gentoo,cvss2=5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N,rhel-4/dovecot=notaffected,rhel-5/dovecot=notaffected,rhel-6/dovecot=affected,fedora-all/dovecot=affected |
| Huzaifa S. Sidhpurwala | 2012-12-10 04:35:37 UTC | Depends On | 885557 | |
| Huzaifa S. Sidhpurwala | 2012-12-10 04:37:10 UTC | Whiteboard | impact=low,public=20111117,reported=20111117,source=gentoo,cvss2=5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N,rhel-4/dovecot=notaffected,rhel-5/dovecot=notaffected,rhel-6/dovecot=affected,fedora-all/dovecot=affected | impact=low,public=20111117,reported=20111117,source=gentoo,cvss2=5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N,rhel-4/dovecot=notaffected,rhel-5/dovecot=notaffected,rhel-6/dovecot=defer,fedora-all/dovecot=affected |
| Huzaifa S. Sidhpurwala | 2012-12-10 04:39:54 UTC | Blocks | 855229 | |
| Karel Volný | 2012-12-16 21:41:28 UTC | CC | kvolny | |
| Flags | needinfo? | |||
| Michal Hlavinka | 2012-12-17 14:19:35 UTC | Flags | needinfo? | |
| Karel Volný | 2013-01-02 14:12:05 UTC | Flags | needinfo?(mhlavink) | |
| Michal Hlavinka | 2013-01-03 15:23:14 UTC | Flags | needinfo?(mhlavink) | |
| Huzaifa S. Sidhpurwala | 2013-01-10 04:51:17 UTC | Whiteboard | impact=low,public=20111117,reported=20111117,source=gentoo,cvss2=5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N,rhel-4/dovecot=notaffected,rhel-5/dovecot=notaffected,rhel-6/dovecot=defer,fedora-all/dovecot=affected | impact=low,public=20111117,reported=20111117,source=gentoo,cvss2=5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N,rhel-4/dovecot=notaffected,rhel-5/dovecot=notaffected,rhel-6/dovecot=affected,fedora-all/dovecot=affected |
| Huzaifa S. Sidhpurwala | 2013-02-22 04:34:52 UTC | Status | NEW | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2013-02-21 23:34:52 UTC | |||
| Ján Rusnačko | 2015-10-23 14:25:41 UTC | CC | jrusnack | |
| Product Security DevOps Team | 2019-09-29 12:48:47 UTC | Whiteboard | impact=low,public=20111117,reported=20111117,source=gentoo,cvss2=5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N,rhel-4/dovecot=notaffected,rhel-5/dovecot=notaffected,rhel-6/dovecot=affected,fedora-all/dovecot=affected |
Back to bug 754980