CVE-2011-4318 Security feature bypass in n/a

What is CVE-2011-4318?

CVE-2011-4318 is a medium-severity vulnerability in Dovecot Dovecot, published on 7 Mar 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Dovecot 2.0.x before 2.0.16, when ssl or starttls is enabled and hostname is used to define the proxy destination, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate for a different hostname.

Weakness: CWE-20

Which versions are affected by CVE-2011-4318?

It affects 1 product.

Products include Dovecot Dovecot.

How do I fix CVE-2011-4318?

Upgrade to a fixed version.

Is CVE-2011-4318 being exploited?

There is no known exploitation of CVE-2011-4318 in the wild and no public exploit code.

Other vulnerabilities in Dovecot Dovecot

• CVE-2026-24031 Auth bypass in OX Dovecot Pro High 7.7
• CVE-2025-59032 Denial of service in OX Dovecot Pro High 7.5
• CVE-2026-27858 Denial of service in OX Dovecot Pro High 7.5
• CVE-2021-29157 Path traversal in n/a High 7.5
• CVE-2020-10957 Null dereference in n/a High 7.5

All Dovecot Dovecot vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2011-4318, GHSA-w2rf-p589-jpp8.