Dovecot vulnerability

2011-06-0200:00:00

ubuntu.com

5.5 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.083 Low

EPSS

Percentile

94.3%

JSON

Releases

Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04

Packages

dovecot - IMAP and POP3 email server

Details

It was discovered that the message header parser in Dovecot did not
properly handle ‘\0’ characters in header names. This could allow a
remote attacker to cause a denial of service through a crafted email
message by crashing the Dovecot daemon or corrupting mailboxes.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.04noarchdovecot-common< 1:1.2.15-3ubuntu2.1UNKNOWN
Ubuntu11.04noarchdovecot-dbg< 1:1.2.15-3ubuntu2.1UNKNOWN
Ubuntu11.04noarchdovecot-dev< 1:1.2.15-3ubuntu2.1UNKNOWN
Ubuntu11.04noarchdovecot-imapd< 1:1.2.15-3ubuntu2.1UNKNOWN
Ubuntu11.04noarchdovecot-pop3d< 1:1.2.15-3ubuntu2.1UNKNOWN
Ubuntu10.10noarchdovecot-common< 1:1.2.12-1ubuntu8.2UNKNOWN
Ubuntu10.10noarchdovecot-dbg< 1:1.2.12-1ubuntu8.2UNKNOWN
Ubuntu10.10noarchdovecot-dev< 1:1.2.12-1ubuntu8.2UNKNOWN
Ubuntu10.10noarchdovecot-imapd< 1:1.2.12-1ubuntu8.2UNKNOWN
Ubuntu10.10noarchdovecot-pop3d< 1:1.2.12-1ubuntu8.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.04	noarch	dovecot-common	< 1:1.2.15-3ubuntu2.1	UNKNOWN
Ubuntu	11.04	noarch	dovecot-dbg	< 1:1.2.15-3ubuntu2.1	UNKNOWN
Ubuntu	11.04	noarch	dovecot-dev	< 1:1.2.15-3ubuntu2.1	UNKNOWN
Ubuntu	11.04	noarch	dovecot-imapd	< 1:1.2.15-3ubuntu2.1	UNKNOWN
Ubuntu	11.04	noarch	dovecot-pop3d	< 1:1.2.15-3ubuntu2.1	UNKNOWN
Ubuntu	10.10	noarch	dovecot-common	< 1:1.2.12-1ubuntu8.2	UNKNOWN
Ubuntu	10.10	noarch	dovecot-dbg	< 1:1.2.12-1ubuntu8.2	UNKNOWN
Ubuntu	10.10	noarch	dovecot-dev	< 1:1.2.12-1ubuntu8.2	UNKNOWN
Ubuntu	10.10	noarch	dovecot-imapd	< 1:1.2.12-1ubuntu8.2	UNKNOWN
Ubuntu	10.10	noarch	dovecot-pop3d	< 1:1.2.12-1ubuntu8.2	UNKNOWN