Lucene search

[email protected]NVD:CVE-2011-1929

HistoryMay 24, 2011 - 11:55 p.m.

CVE-2011-1929

2011-05-2423:55:04

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

High

EPSS

0.112

Percentile

95.2%

JSON

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle ‘\0’ characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.

Affected configurations

Nvd

Node

dovecotdovecotMatch1.2.0

dovecotdovecotMatch1.2.1

dovecotdovecotMatch1.2.2

dovecotdovecotMatch1.2.3

dovecotdovecotMatch1.2.4

dovecotdovecotMatch1.2.5

dovecotdovecotMatch1.2.6

dovecotdovecotMatch1.2.7

dovecotdovecotMatch1.2.8

dovecotdovecotMatch1.2.9

dovecotdovecotMatch1.2.10

dovecotdovecotMatch1.2.11

dovecotdovecotMatch1.2.12

dovecotdovecotMatch1.2.13

dovecotdovecotMatch1.2.14

dovecotdovecotMatch1.2.15

dovecotdovecotMatch1.2.16

Node

dovecotdovecotMatch2.0beta1

dovecotdovecotMatch2.0.0

dovecotdovecotMatch2.0.1

dovecotdovecotMatch2.0.2

dovecotdovecotMatch2.0.3

dovecotdovecotMatch2.0.4

dovecotdovecotMatch2.0.5

dovecotdovecotMatch2.0.6

dovecotdovecotMatch2.0.7

dovecotdovecotMatch2.0.8

dovecotdovecotMatch2.0.9

dovecotdovecotMatch2.0.10

dovecotdovecotMatch2.0.11

dovecotdovecotMatch2.0.12

VendorProductVersionCPE
dovecotdovecot1.2.0cpe:2.3:a:dovecot:dovecot:1.2.0:*:*:*:*:*:*:*
dovecotdovecot1.2.1cpe:2.3:a:dovecot:dovecot:1.2.1:*:*:*:*:*:*:*
dovecotdovecot1.2.2cpe:2.3:a:dovecot:dovecot:1.2.2:*:*:*:*:*:*:*
dovecotdovecot1.2.3cpe:2.3:a:dovecot:dovecot:1.2.3:*:*:*:*:*:*:*
dovecotdovecot1.2.4cpe:2.3:a:dovecot:dovecot:1.2.4:*:*:*:*:*:*:*
dovecotdovecot1.2.5cpe:2.3:a:dovecot:dovecot:1.2.5:*:*:*:*:*:*:*
dovecotdovecot1.2.6cpe:2.3:a:dovecot:dovecot:1.2.6:*:*:*:*:*:*:*
dovecotdovecot1.2.7cpe:2.3:a:dovecot:dovecot:1.2.7:*:*:*:*:*:*:*
dovecotdovecot1.2.8cpe:2.3:a:dovecot:dovecot:1.2.8:*:*:*:*:*:*:*
dovecotdovecot1.2.9cpe:2.3:a:dovecot:dovecot:1.2.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dovecot	dovecot	1.2.0	cpe:2.3:a:dovecot:dovecot:1.2.0:::::::*
dovecot	dovecot	1.2.1	cpe:2.3:a:dovecot:dovecot:1.2.1:::::::*
dovecot	dovecot	1.2.2	cpe:2.3:a:dovecot:dovecot:1.2.2:::::::*
dovecot	dovecot	1.2.3	cpe:2.3:a:dovecot:dovecot:1.2.3:::::::*
dovecot	dovecot	1.2.4	cpe:2.3:a:dovecot:dovecot:1.2.4:::::::*
dovecot	dovecot	1.2.5	cpe:2.3:a:dovecot:dovecot:1.2.5:::::::*
dovecot	dovecot	1.2.6	cpe:2.3:a:dovecot:dovecot:1.2.6:::::::*
dovecot	dovecot	1.2.7	cpe:2.3:a:dovecot:dovecot:1.2.7:::::::*
dovecot	dovecot	1.2.8	cpe:2.3:a:dovecot:dovecot:1.2.8:::::::*
dovecot	dovecot	1.2.9	cpe:2.3:a:dovecot:dovecot:1.2.9:::::::*