An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect username_filter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an unintended security configuration and can permit privilege escalation in certain configurations. The documentation does not advise against the use of passdb definitions that have the same driver and args settings. One such configuration would be where an administrator wishes to use the same PAM configuration or passwd file for both normal and master users but use the username_filter setting to restrict which of the users is able to be a master user.

The version of dovecot installed on the remote host is prior to 2.2.36-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2365 advisory.

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:8208 advisory.

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202310-19 (Dovecot: Privilege Escalation)

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8208 advisory.

    [1:2.3.16-7.0.1]
    - do not run systemd commands during leapp upgrade [Orabug: 34680501]

    [1:2.3.16-7]
    - fix possible privilege escalation when similar master and non-master passdbs are used (#2106232)

    [1:2.3.16-6]
    - fix possible nonzero return value of postinst script(#2053368)

    [1:2.3.16-5]
    - workaround sysuers macro defficiency (#2095399)

    [1:2.3.16-4]
    - use systemd-sysusers for user creation (#2095399)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8208 advisory.

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7623 advisory.

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7623 advisory.

    [1:2.3.16-3]
    - fix possible privilege escalation when similar master and non-master passdbs are used (#2106231)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8208 advisory.

    Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind.
    It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL     drivers and authentication plug-ins are provided as subpackages.

    Security Fix(es):

    * dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7623 advisory.

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7623 advisory.

  - dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7623 advisory.

    Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind.
    It also contains a small POP3 server and supports e-mail in either the maildir or mbox format. The SQL     drivers and authentication plug-ins are provided as subpackages.

    Security Fix(es):

    * dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3122 advisory.

  - The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive     information can be redirected to an attacker-controlled address. (CVE-2021-33515)

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2618-1 advisory.

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2431-1 advisory.

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2432-1 advisory.

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2448-1 advisory.

  - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb     configuration entries exist with the same driver and args settings, incorrect username_filter and     mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an     unintended security configuration and can permit privilege escalation in certain configurations. The     documentation does not advise against the use of passdb definitions that have the same driver and args     settings. One such configuration would be where an administrator wishes to use the same PAM configuration     or passwd file for both normal and master users but use the username_filter setting to restrict which of     the users is able to be a master user. (CVE-2022-30550)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5509-1 advisory.

    Julian Brook discovered that Dovecot incorrectly handled multiple passdb configuration entries. In certain     configurations, a remote attacker could possibly use this issue to escalate privileges.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
186564	Amazon Linux 2 : dovecot (ALAS-2023-2365)	Nessus	Amazon Linux Local Security Checks	high
184638	Rocky Linux 9 : dovecot (RLSA-2022:8208)	Nessus	Rocky Linux Local Security Checks	high
184011	GLSA-202310-19 : Dovecot: Privilege Escalation	Nessus	Gentoo Local Security Checks	high
168073	Oracle Linux 9 : dovecot (ELSA-2022-8208)	Nessus	Oracle Linux Local Security Checks	high
167983	AlmaLinux 9 : dovecot (ALSA-2022:8208)	Nessus	Alma Linux Local Security Checks	high
167809	Rocky Linux 8 : dovecot (RLSA-2022:7623)	Nessus	Rocky Linux Local Security Checks	high
167531	Oracle Linux 8 : dovecot (ELSA-2022-7623)	Nessus	Oracle Linux Local Security Checks	high
167523	RHEL 9 : dovecot (RHSA-2022:8208)	Nessus	Red Hat Local Security Checks	high
167299	AlmaLinux 8 : dovecot (ALSA-2022:7623)	Nessus	Alma Linux Local Security Checks	high
167192	CentOS 8 : dovecot (CESA-2022:7623)	Nessus	CentOS Local Security Checks	high
167089	RHEL 8 : dovecot (RHSA-2022:7623)	Nessus	Red Hat Local Security Checks	high
165855	EulerOS 2.0 SP8 : dovecot (EulerOS-SA-2022-2456)	Nessus	Huawei Local Security Checks	high
165510	Debian DLA-3122-1 : dovecot - LTS security update	Nessus	Debian Local Security Checks	high
163713	SUSE SLES12 Security Update : dovecot22 (SUSE-SU-2022:2618-1)	Nessus	SuSE Local Security Checks	high
163383	SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2022:2431-1)	Nessus	SuSE Local Security Checks	high
163374	SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2022:2432-1)	Nessus	SuSE Local Security Checks	high
163356	SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2022:2448-1)	Nessus	SuSE Local Security Checks	high
162993	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Dovecot vulnerability (USN-5509-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2022-30550

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high