USN-387-1: Dovecot vulnerability

Dovecot was discovered to have an error when handling its index cache files. This error could be exploited by authenticated POP and IMAP users to cause a crash of the Dovecot server, or possibly to execute arbitrary code. Only servers using the non-default option "mmapdisable=yes" were vulnerable...

Dovecot IMAP/POP3 server: Off-by-one buffer overflow

Version: 1.0test53 .. 1.0.rc14 ie. all 1.0alpha, 1.0beta and 1.0rc versions in the middle. 0.99.x versions are safe they don't even have mmapdisable setting. Problem: When mmapdisable=yes setting is used not default, dovecot.index.cache file is read to memory using "file cache" code. It contains ...

CVE-2006-5973: Undefined Security Weakness

Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmapdisable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service crash via unspecified vectors involving the cache file...