Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-5514
HistoryDec 23, 2008 - 6:30 p.m.

CVE-2008-5514

2008-12-2318:30:03
CWE-119
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.2%

JSON

Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.

Affected configurations

NVD
Node
university_of_washingtonimapRange≀2007d
OR
university_of_washingtonimapMatch2000
OR
university_of_washingtonimapMatch2000a
OR
university_of_washingtonimapMatch2000b
OR
university_of_washingtonimapMatch2000c
OR
university_of_washingtonimapMatch2001
OR
university_of_washingtonimapMatch2001a
OR
university_of_washingtonimapMatch2002
OR
university_of_washingtonimapMatch2002a
OR
university_of_washingtonimapMatch2002b
OR
university_of_washingtonimapMatch2002c
OR
university_of_washingtonimapMatch2002d
OR
university_of_washingtonimapMatch2002e
OR
university_of_washingtonimapMatch2002f
OR
university_of_washingtonimapMatch2004
OR
university_of_washingtonimapMatch2004a
OR
university_of_washingtonimapMatch2004b
OR
university_of_washingtonimapMatch2004c
OR
university_of_washingtonimapMatch2004d
OR
university_of_washingtonimapMatch2004e
OR
university_of_washingtonimapMatch2004f
OR
university_of_washingtonimapMatch2004g
OR
university_of_washingtonimapMatch2006
OR
university_of_washingtonimapMatch2006a
OR
university_of_washingtonimapMatch2006b
OR
university_of_washingtonimapMatch2006c
OR
university_of_washingtonimapMatch2006d
OR
university_of_washingtonimapMatch2006e
OR
university_of_washingtonimapMatch2006f
OR
university_of_washingtonimapMatch2006g
OR
university_of_washingtonimapMatch2006h
OR
university_of_washingtonimapMatch2006i
OR
university_of_washingtonimapMatch2006j
OR
university_of_washingtonimapMatch2006k
OR
university_of_washingtonimapMatch2007
OR
university_of_washingtonimapMatch2007a
OR
university_of_washingtonimapMatch2007b

Related

nessus 10
openvas 24
prion 1
cvelist 1
cve 1
freebsd 2
fedora 2
ubuntucve 1
debiancve 1
seebug 1
gentoo 2
debian 2
nessus
nessus
FreeBSD : imap-uw -- local buffer overflow vulnerabilities (a6713190-dfea-11dd-a765-0030843d3802)
2009-01-12 00:00:00
FreeBSD : imap-uw -- imap c-client buffer overflow (69a20ce4-dfee-11dd-a765-0030843d3802)
2009-01-12 00:00:00
Fedora 9 : uw-imap-2007e-1.fc9 (2009-0371)
2009-01-22 00:00:00
openvas
openvas
FreeBSD Ports: imap-uw
2009-01-13 00:00:00
Fedora Core 9 FEDORA-2009-0371 (uw-imap)
2009-01-26 00:00:00
FreeBSD Ports: imap-uw
2009-01-13 00:00:00
prion
prion
Buffer overflow
2008-12-23 18:30:00
cvelist
cvelist
CVE-2008-5514
2008-12-23 18:13:00
cve
cve
CVE-2008-5514
2008-12-23 18:30:03
freebsd
freebsd
imap-uw -- imap c-client buffer overflow
2008-12-16 00:00:00
imap-uw -- local buffer overflow vulnerabilities
2008-10-29 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: uw-imap-2007e-1.fc9
2009-01-21 21:39:10
[SECURITY] Fedora 10 Update: uw-imap-2007e-1.fc10
2009-01-21 21:37:01
ubuntucve
ubuntucve
CVE-2008-5514
2008-12-23 00:00:00
debiancve
debiancve
CVE-2008-5514
2008-12-23 18:30:03
seebug
seebug
UW-IMAP c-clientεΊ“ε•ε­—θŠ‚ζΊ’ε‡ΊζΌζ΄ž
2008-12-23 00:00:00
gentoo
gentoo
UW IMAP toolkit: Multiple vulnerabilities
2009-11-25 00:00:00
PHP: Multiple vulnerabilities
2010-01-05 00:00:00
debian
debian
[Backports-security-announce] Security Update for uw-imap
2009-01-16 07:50:14
[Backports-security-announce] Security Update for uw-imap
2009-01-16 07:50:23

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.2%

JSON
Related for NVD:CVE-2008-5514
nessus10openvas24prion1cvelist1cve1freebsd2fedora2ubuntucve1debiancve1seebug1gentoo2debian2