CVE:CVE-2021-33515
CNNVD:CNNVD-202106-1446
Dovecot是一款开源的基于类Linux/UNIX系统的IMAP和POP3邮件服务器。
Dovecot 2.3.15 之前版本的提交服务存在命令注入漏洞，该漏洞允许攻击者在 lib-smtp 中注入 STARTTLS 命令，敏感信息可以重定向到攻击者控制的地址。
solution:Upgrade dovecot dovecot to a higher version than 2.3.14.1,and avoid the version (,2.3.14.1); Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0