Description
Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://dovecot.org/pipermail/dovecot-news/2006-November/000024.html ↗
- http://www.ubuntu.com/usn/usn-387-1 ↗
- http://secunia.com/advisories/23150 ↗
- http://www.novell.com/linux/security/advisories/2006_73_mono.html ↗
- http://secunia.com/advisories/23007 ↗
- http://secunia.com/advisories/23172 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30433 ↗
- http://www.securityfocus.com/archive/1/452081/100/0/threaded ↗
- http://dovecot.org/list/dovecot-news/2006-November/000023.html ↗
- http://secunia.com/advisories/23213 ↗
- http://securitytracker.com/id?1017288 ↗
- http://www.vupen.com/english/advisories/2006/4614 ↗
- http://www.securityfocus.com/bid/21183/info ↗
- https://issues.rpath.com/browse/RPL-802 ↗